[clamav-users] Match on raw .wsf file?

2016-08-30 Thread Kris Deugau
Is there a way to force matching on the raw file, or at least control the normalization to some degree so that formatting and details in the original code aren't lost? I've been coming across .wsf files in .zip files, which are essentially Javascript wrapped in a very thin wrapper: [insert nasty

Re: [clamav-users] can't demonstrate that On-Access scanning is working (fedora 24)

2016-08-30 Thread Mickey Sola
H, when running clamd manually could you also try enabling debug and opening an eicar sample file in addition to the other tests you've been running? -Mickey On Tue, Aug 30, 2016 at 10:25 AM, Hugo Bernier wrote: > Hi Mickey, > > I've set OnAccessMaxFileSize 1000M. > > Instead of "Tue Aug 30

Re: [clamav-users] can't demonstrate that On-Access scanning is working (fedora 24)

2016-08-30 Thread Hugo Bernier
Hi Mickey, I've set OnAccessMaxFileSize 1000M. Instead of "Tue Aug 30 10:38:59 2016 -> ScanOnAccess: Max file size limited to -1 bytes" I get: "Tue Aug 30 12:44:08 2016 -> ScanOnAccess: Max file size limited to 1048576000 bytes" I still don't see any entries when I open up files. I should note

Re: [clamav-users] can't demonstrate that On-Access scanning is working (fedora 24)

2016-08-30 Thread Mickey Sola
Hi Hugo, Could you try setting the max filesize option to a non-zero value and let me know if that changes anything? -Mickey On Aug 30, 2016 7:51 AM, "Hugo Bernier" wrote: > We have a new requirement at work that we have virus scanners installed on > our workstations. > > What I'm trying to do

[clamav-users] can't demonstrate that On-Access scanning is working (fedora 24)

2016-08-30 Thread Hugo Bernier
We have a new requirement at work that we have virus scanners installed on our workstations. What I'm trying to do is demonstrate that onAccess scanning works. What I'm expecting, which could be wrong, is that there would be output either in the logs or clamdtop when a file is opened other otherwi