[clamav-users] Upgrade ClamAV on Mac Problem

2019-03-18 Thread CL via clamav-users
 

I run a Mac OSX server – High Sierra.

 

I noticed in my anti virus log that there was a new version of Clam AV:

 

WARNING: Local version: 0.99.2 Recommended version: 0.101.1

 

I followed these instructions exactly and didn’t have any problems:

 

https://www.clamav.net/documents/installation-on-macos-mac-os-x

 

HOWEVER, whenever I start my mail server on OSX and look at the log file

 

It is still running version 0.99.2 and isn’t finding 0.101.1

 

The new install is in /usr/local/cellar/clamAV

And the old install appears to be under /library/server/mail/scanner or 
something like that.

 

What am I missing?

 

What config file is pointing to the old install vs the new install?    

 

How/what do I change?

 

Thank you for your help.

 

 

 

 

 


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV on openSUSE Tumbleweed

2019-03-18 Thread ellanios82 via clamav-users

On 3/17/19 6:07 PM, J.R. via clamav-users wrote:

  - after Downloading daily-25380.cdiff
  am getting stuck : just nothing happens

It's not really stuck it just takes a lng time to process (people
reported over an hour):

https://lists.clamav.net/pipermail/clamav-users/2019-March/007651.html

Faster option is to delete the daily.cld then run freshclam again and
it will download the most recent daily.cvd file.

___



 - many  thanks : indeed, after loong time it's got going  :)






 - usually , i run ClamAV on my home PC once a week : have about 42 GB 
files in total



 - normally ClamAV takes about 4 hours to complete


but ,


Today , ClamAV is running for 7 hours , and STILL not finished


 - something odd ??

p.s.
 Omitted to say, 7 times i receive this message :

execution>


..


 - Eventually finished : took 12 Hours to scan 44 GB

 [ normally, would have expected 4 Hours to scan my 44 GB ]


 thanks



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Upgrade ClamAV on Mac Problem

2019-03-18 Thread Al Varnell via clamav-users
Updating it can only properly be done by Apple and they have never been 
interested in doing that since they first used it.

There are some very old instructions on how to update ClamAV on an OS X Server 
>= 10.5.6. The author has made it clear that he won't be updating them and the 
question I asked about one fine point back in Oct 2016 went unanswered, but you 
might be able to work your way through it:

>

-Al-

On Mar 18, 2019, at 00:46, CL via clamav-users  
wrote:
> I run a Mac OSX server – High Sierra.
>  
> I noticed in my anti virus log that there was a new version of Clam AV:
>  
> WARNING: Local version: 0.99.2 Recommended version: 0.101.1
>  
> I followed these instructions exactly and didn’t have any problems:
>  
> https://www.clamav.net/documents/installation-on-macos-mac-os-x 
> 
>  
> HOWEVER, whenever I start my mail server on OSX and look at the log file
>  
> It is still running version 0.99.2 and isn’t finding 0.101.1
>  
> The new install is in /usr/local/cellar/clamAV
> And the old install appears to be under /library/server/mail/scanner or 
> something like that.
>  
> What am I missing?
>  
> What config file is pointing to the old install vs the new install?
>  
> How/what do I change?
>  
> Thank you for your help.


smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Yasuhiro KIMURA
From: Jean-Michel via clamav-users 
Subject: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 11:38:00 +0100

> Did you have the same problem ?
> Is there not a bug ?

H/W(VirtualHost):
  CPU: Intel Xeon E312xx (Sandy Bridge) x6
  Mem: 8GB
OS: Debian 9.8 amd64
ClamAV: 0.100.2+dfsg-0+deb9u1

yasu@kusanagi[1714]% clamdscan esploso_A3TH.pdf
/home/yasu/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 0.011 sec (0 m 0 s)
yasu@kusanagi[1715]%

---
Yasuhiro KIMURA

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Jean-Michel via clamav-users
Thank you Yasuhiro KIMURA ,
Isn't it the second scan result ? The second analyse on same file is faster.
Could tou try to restart clamav-daemon and re-do the analyse with clamdscan.
I've tried it on 3 computers, all are above 40seconds



-Message d'origine-
De : jmed...@amv-sa.fr  
Envoyé : lundi 18 mars 2019 11:38
À : clamav-users@lists.clamav.net
Objet : [clamav-users] Scan very slow

Hi,

Since some weeks, my clamav (0.100.2+dfsg-0+deb9u1) on Debian 9 64b is very
slow for scanning some files.
It seems that this concerns PDF files. We have this problem with a lot of
files.

I'm using daemon version with default clamd.conf

# clamdscan -v /tmp/esploso_A3TH.pdf
/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 185.457 sec (3 m 5 s)

For information, we use a good server (2x Xeon E5-2630v3 with 128Go). I
tried on several servers, the scan is very slow too.

I'll attach one example PDF file. 

Did you have the same problem ?
Is there not a bug ?

Regards,
JME



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Arnaud Jacques

Hello,


Did you have the same problem ?
Is there not a bug ?


Seems same here :

clamdscan -m --fdpass *
/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 59.406 sec (0 m 59 s)

Using clamscan --debug shows there is a LOT of embedded items in this 
PDF file (2886 files extracted and scanned from this PDF).


--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : a...@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Jean-Michel via clamav-users
Hello,
Thanks for your feedback.
Indeed, there are many elements in this file.
It is surprising that the analysis is so long. I tested the file with 6
other antivirus (paid), the analysis lasts less than one second.
Do you think that it is possible for example to limit the number "embedded
items in this PDF file" in order to reduce the analysis time?
Regards,
JME

-Message d'origine-
De : Arnaud Jacques  
Envoyé : lundi 18 mars 2019 13:08
À : ClamAV users ML 
Cc : jmed...@amv-sa.fr
Objet : Re: [clamav-users] Scan very slow

Hello,

> Did you have the same problem ?
> Is there not a bug ?

Seems same here :

clamdscan -m --fdpass *
/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 59.406 sec (0 m 59 s)

Using clamscan --debug shows there is a LOT of embedded items in this PDF
file (2886 files extracted and scanned from this PDF).

--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : a...@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Yasuhiro KIMURA
From: Jean-Michel via clamav-users 
Subject: Re: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 12:30:49 +0100

> Isn't it the second scan result ? The second analyse on same file is faster.
> Could tou try to restart clamav-daemon and re-do the analyse with clamdscan.
> I've tried it on 3 computers, all are above 40seconds

It was first trial. But after restarting clamav-daemon result changed
as following.

yasu@kusanagi[1716]% clamdscan esploso_A3TH.pdf
/home/yasu/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 60.551 sec (1 m 0 s)
yasu@kusanagi[1717]%

---
Yasuhiro KIMURA

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Arnaud Jacques

Jean-Michel,

Le 18/03/2019 à 14:55, Jean-Michel via clamav-users a écrit :

Hello,
Thanks for your feedback.
Indeed, there are many elements in this file.
It is surprising that the analysis is so long. I tested the file with 6
other antivirus (paid), the analysis lasts less than one second.

That does not mean scanning is deep and detection is maximum :)



Do you think that it is possible for example to limit the number "embedded
items in this PDF file" in order to reduce the analysis time?


I think so. Please see --max-files option of clamscan (clamdscan has 
same option in clamd.conf)

Maybe more usefull options using :
clamscan --help|grep max
I guess you can play with such options to optimize your scan.

--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : a...@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Maarten Broekman via clamav-users
We've noticed a marked increase in scan times over the last couple of weeks
as well. From the look of it, there's something in the daily file that's
causing it. Whether this is similar to the safebrowsing issue (where the
ordering of entries in the file caused a 3000% increase in time) is unclear.

--Maarten Broekman

Full scans without the daily cvd/cld: Scan time ~60seconds
Full scans with the daily from March 11th: Scan time: 84seconds
Full scans with the daily from March 17th: Scan time: 109seconds

~/clamav# ls -larth  /tmp/clamdtest*/daily.cld
-rw-r--r-- 1 clamav clamav 110M Mar 11 04:15 /tmp/clamdtest2/daily.cld
-rw-r--r-- 1 clamav clamav 113M Mar 17 04:15 /tmp/clamdtest/daily.cld

~/clamav# wc /tmp/clamdtest*/daily.cld
  1514589   1517471 115031552 /tmp/clamdtest2/daily.cld
  1524782   1527664 118202368 /tmp/clamdtest/daily.cld

Single file scans with JUST the daily.cld:
~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest2/daily.cld
test42.js
test42.js: OK

--- SCAN SUMMARY ---
Known viruses: 1504423
Engine version: 0.100.2
Scanned directories: 1
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 5.255 sec (0 m 5 s)

real0m5.260s
user0m5.044s
sys0m0.192s
~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest/daily.cld
test42.js
test42.js: OK

--- SCAN SUMMARY ---
Known viruses: 1514543
Engine version: 0.100.2
Scanned directories: 1
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 9.300 sec (0 m 9 s)

real0m9.329s
user0m9.100s
sys0m0.204s






On Mon, Mar 18, 2019 at 10:02 AM Yasuhiro KIMURA  wrote:

> From: Jean-Michel via clamav-users 
> Subject: Re: [clamav-users] Scan very slow
> Date: Mon, 18 Mar 2019 12:30:49 +0100
>
> > Isn't it the second scan result ? The second analyse on same file is
> faster.
> > Could tou try to restart clamav-daemon and re-do the analyse with
> clamdscan.
> > I've tried it on 3 computers, all are above 40seconds
>
> It was first trial. But after restarting clamav-daemon result changed
> as following.
>
> yasu@kusanagi[1716]% clamdscan esploso_A3TH.pdf
> /home/yasu/tmp/esploso_A3TH.pdf: OK
>
> --- SCAN SUMMARY ---
> Infected files: 0
> Time: 60.551 sec (1 m 0 s)
> yasu@kusanagi[1717]%
>
> ---
> Yasuhiro KIMURA
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Jean-Michel via clamav-users
Very interesting. 
Do you think we should make a bug-report?
Regards

 

 

De : Maarten Broekman  
Envoyé : lundi 18 mars 2019 15:14
À : ClamAV users ML 
Objet : Re: [clamav-users] Scan very slow

 

We've noticed a marked increase in scan times over the last couple of weeks as 
well. From the look of it, there's something in the daily file that's causing 
it. Whether this is similar to the safebrowsing issue (where the ordering of 
entries in the file caused a 3000% increase in time) is unclear.

 

--Maarten Broekman

 

Full scans without the daily cvd/cld: Scan time ~60seconds

Full scans with the daily from March 11th: Scan time: 84seconds

Full scans with the daily from March 17th: Scan time: 109seconds

 

~/clamav# ls -larth  /tmp/clamdtest*/daily.cld

-rw-r--r-- 1 clamav clamav 110M Mar 11 04:15 /tmp/clamdtest2/daily.cld

-rw-r--r-- 1 clamav clamav 113M Mar 17 04:15 /tmp/clamdtest/daily.cld

 

~/clamav# wc /tmp/clamdtest*/daily.cld

  1514589   1517471 115031552 /tmp/clamdtest2/daily.cld

  1524782   1527664 118202368 /tmp/clamdtest/daily.cld

 

Single file scans with JUST the daily.cld:

~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest2/daily.cld 
test42.js

test42.js: OK

 

--- SCAN SUMMARY ---

Known viruses: 1504423

Engine version: 0.100.2

Scanned directories: 1

Scanned files: 1

Infected files: 0

Data scanned: 0.00 MB

Data read: 0.00 MB (ratio 0.00:1)

Time: 5.255 sec (0 m 5 s)

 

real0m5.260s

user0m5.044s

sys0m0.192s

~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest/daily.cld 
test42.js

test42.js: OK

 

--- SCAN SUMMARY ---

Known viruses: 1514543

Engine version: 0.100.2

Scanned directories: 1

Scanned files: 1

Infected files: 0

Data scanned: 0.00 MB

Data read: 0.00 MB (ratio 0.00:1)

Time: 9.300 sec (0 m 9 s)

 

real0m9.329s

user0m9.100s

sys0m0.204s

 

 

 

 

 

 

On Mon, Mar 18, 2019 at 10:02 AM Yasuhiro KIMURA mailto:y...@utahime.org> > wrote:

From: Jean-Michel via clamav-users mailto:clamav-users@lists.clamav.net> >
Subject: Re: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 12:30:49 +0100

> Isn't it the second scan result ? The second analyse on same file is faster.
> Could tou try to restart clamav-daemon and re-do the analyse with clamdscan.
> I've tried it on 3 computers, all are above 40seconds

It was first trial. But after restarting clamav-daemon result changed
as following.

yasu@kusanagi[1716]% clamdscan esploso_A3TH.pdf
/home/yasu/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 60.551 sec (1 m 0 s)
yasu@kusanagi[1717]%

---
Yasuhiro KIMURA

___

clamav-users mailing list
clamav-users@lists.clamav.net  
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV on openSUSE Tumbleweed

2019-03-18 Thread Micah Snyder (micasnyd) via clamav-users
Hi ellanios82,

How often do you update your signature database?  How often do you do a scan?
Did this slowdown just occur in the last few days, or last couple weeks?

I am curious if the slowdown occurred after daily-25380.cdiff (a database 
change that I am told removed many hash signatures from the database which 
would be detected by more efficient signatures), or if some change to bytecode 
signatures is causing much slower scans.  The message you reported "LibClamAV 
Warning: Bytecode 3 failed to run: Error during bytecode execution" isn't 
necessarily due to a bytecode timeout (which is more common), but indicates 
some sort of problem with a bytecode signature.  If you can identify what files 
cause this error, it would very helpful if we could analyze those files with 
the signature to see what is going wrong.

Thanks,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
 


On 3/18/19, 3:52 AM, "clamav-users on behalf of ellanios82 via clamav-users" 
 wrote:
  - usually , i run ClamAV on my home PC once a week : have about 42 GB 
files in total
  - normally ClamAV takes about 4 hours to complete but , Today , ClamAV is 
running for 7 hours , and STILL not finished
  - something odd ??

p.s.
  Omitted to say, 7 times i receive this message :


..
   
  - Eventually finished : took 12 Hours to scan 44 GB  [ normally, would 
have expected 4 Hours to scan my 44 GB ]

  thanks



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Scan very slow

2019-03-18 Thread Micah Snyder (micasnyd) via clamav-users
Maarten,

This is very concerning, and the details you’ve provide are quite helpful.  
Thank you for investigating.
Hopefully we can figure out why the newer daily.cld/cvd is scanning 
significantly slower than before. Any other details you can provide would 
probably be helpful.  If you’re aware if any specific file types are causing 
the issue, or if all files appear to scanning slower that will also help.

-Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.



From: clamav-users  on behalf of Maarten 
Broekman via clamav-users 
Reply-To: ClamAV users ML 
Date: Monday, March 18, 2019 at 10:37 AM
To: ClamAV users ML 
Cc: Maarten Broekman 
Subject: Re: [clamav-users] Scan very slow

We've noticed a marked increase in scan times over the last couple of weeks as 
well. From the look of it, there's something in the daily file that's causing 
it. Whether this is similar to the safebrowsing issue (where the ordering of 
entries in the file caused a 3000% increase in time) is unclear.

--Maarten Broekman

Full scans without the daily cvd/cld: Scan time ~60seconds
Full scans with the daily from March 11th: Scan time: 84seconds
Full scans with the daily from March 17th: Scan time: 109seconds

~/clamav# ls -larth  /tmp/clamdtest*/daily.cld
-rw-r--r-- 1 clamav clamav 110M Mar 11 04:15 /tmp/clamdtest2/daily.cld
-rw-r--r-- 1 clamav clamav 113M Mar 17 04:15 /tmp/clamdtest/daily.cld

~/clamav# wc /tmp/clamdtest*/daily.cld
  1514589   1517471 115031552 /tmp/clamdtest2/daily.cld
  1524782   1527664 118202368 /tmp/clamdtest/daily.cld

Single file scans with JUST the daily.cld:
~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest2/daily.cld 
test42.js
test42.js: OK

--- SCAN SUMMARY ---
Known viruses: 1504423
Engine version: 0.100.2
Scanned directories: 1
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 5.255 sec (0 m 5 s)

real0m5.260s
user0m5.044s
sys0m0.192s
~/clamav# time /opt/clamav/clamav/bin/clamscan -d /tmp/clamdtest/daily.cld 
test42.js
test42.js: OK

--- SCAN SUMMARY ---
Known viruses: 1514543
Engine version: 0.100.2
Scanned directories: 1
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 9.300 sec (0 m 9 s)

real0m9.329s
user0m9.100s
sys0m0.204s






On Mon, Mar 18, 2019 at 10:02 AM Yasuhiro KIMURA 
mailto:y...@utahime.org>> wrote:
From: Jean-Michel via clamav-users 
mailto:clamav-users@lists.clamav.net>>
Subject: Re: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 12:30:49 +0100

> Isn't it the second scan result ? The second analyse on same file is faster.
> Could tou try to restart clamav-daemon and re-do the analyse with clamdscan.
> I've tried it on 3 computers, all are above 40seconds

It was first trial. But after restarting clamav-daemon result changed
as following.

yasu@kusanagi[1716]% clamdscan esploso_A3TH.pdf
/home/yasu/tmp/esploso_A3TH.pdf: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 60.551 sec (1 m 0 s)
yasu@kusanagi[1717]%

---
Yasuhiro KIMURA

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Upgrade ClamAV on Mac Problem

2019-03-18 Thread CL via clamav-users
 

Thanks Al.

 

I found that last night after my email.

 

It looks like I need to update the path with the new version that load when the 
mac loads.


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV on openSUSE Tumbleweed

2019-03-18 Thread ellanios82 via clamav-users

On 3/18/19 7:02 PM, Micah Snyder (micasnyd) wrote:

Hi ellanios82,

How often do you update your signature database?  How often do you do a scan?
Did this slowdown just occur in the last few days, or last couple weeks?

I am curious if the slowdown occurred after daily-25380.cdiff (a database change that I 
am told removed many hash signatures from the database which would be detected by more 
efficient signatures), or if some change to bytecode signatures is causing much slower 
scans.  The message you reported "LibClamAV Warning: Bytecode 3 failed to run: Error 
during bytecode execution" isn't necessarily due to a bytecode timeout (which is 
more common), but indicates some sort of problem with a bytecode signature.  If you can 
identify what files cause this error, it would very helpful if we could analyze those 
files with the signature to see what is going wrong.

Thanks,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
  



On 3/18/19, 3:52 AM, "clamav-users on behalf of ellanios82 via clamav-users" 
 wrote:
   - usually , i run ClamAV on my home PC once a week : have about 42 GB 
files in total
   - normally ClamAV takes about 4 hours to complete but , Today , ClamAV 
is running for 7 hours , and STILL not finished
   - something odd ??
 
 p.s.

   Omitted to say, 7 times i receive this message :
 
 
 ..

   - Eventually finished : took 12 Hours to scan 44 GB  [ normally, would have expected 4 Hours to scan my 44 GB ]


   thanks
 



...

 Hi Micah ,


 - i scan once a week : before scan ,  do 'update my signature database'


..

 regards



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Difference between datadir and datarootdir

2019-03-18 Thread Jobst Schmalenbach via clamav-users
On Wed, Mar 06, 2019 at 10:11:21PM -0500, Michael Orlitzky via clamav-users 
(clamav-users@lists.clamav.net) wrote:
> On 3/4/19 9:28 PM, Jobst Schmalenbach via clamav-users wrote:
> > 
> > This is really confusing as datadir points DATAROOTDIR.
> > Can I make them the same?
> 
> It's confusing in clamav because it's confusing everywhere. Those
> directories and their meanings' come from autotools:

[snip]

> So to summarize: yes, you can set them the same, and they will usually
> be the same.

Good, thanks!
Jobst


-- 
There are 10 kinds of people in the world, those who understand binary and 
those who don't.

  | |0| |   Jobst Schmalenbach, General Manager
  | | |0|   Barrett & Sales Essentials
  |0|0|0|   +61 3 9533 , POBox 277, Caulfield South, 3162, Australia

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml