On 1/19/11 9:35 AM, Török Edwin wrote:
Hi,
I just published bytecode.cvd version 120.
This should fix the long scan times, and FP submission id 20879645 (
87ac7d7a40d56e9678121ac5aa80c24e).
If you still see long scan times or false positives after you updated to
version 120 please submit the files.
I've updated to bytecode.cvd version 120 but am still seeing the FP.
Have disabled scanning of PDFs for now.
The virus submission page won't let me upload my sample though -
"Result: This file is not detected by ClamAV". How can this be?
[root][ /var/clamav/tmp ]# freshclam
ClamAV update process started at Wed Jan 19 11:43:42 2011
main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder:
sven)
daily.cld is up to date (version: 12547, sigs: 30475, f-level: 58,
builder: ccordes)
bytecode.cld is up to date (version: 120, sigs: 30, f-level: 58,
builder: edwin)
[root][ /var/clamav/tmp ]# clamscan --verbose virus.UaayOU
Scanning virus.UaayOU
virus.UaayOU: BC.PDF.Producer.JSHIP FOUND
----------- SCAN SUMMARY -----------
Known viruses: 875467
Engine version: 0.96.5
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.04 MB
Data read: 2.25 MB (ratio 0.02:1)
Time: 38.769 sec (0 m 38 s)
--
Roy McMorran
Systems Administrator
MDI Biological Laboratory
mcmor...@mdibl.org
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
