Re: [clamav-users] Multiple Streams embedded as base64 inside xml

2020-04-24 Thread G.W. Haywood via clamav-users
Hi there, On Fri, 24 Apr 2020, Kris Deugau wrote: G.W. Haywood via clamav-users wrote: It's quite possible that a scan could catch some known problem in *any* file, no matter how compressed, containerized and obfuscated, if there's already a signature which matches something in the raw file (

Re: [clamav-users] Multiple Streams embedded as base64 inside xml

2020-04-24 Thread Kris Deugau
G.W. Haywood via clamav-users wrote: It's quite possible that a scan could catch some known problem in *any* file, no matter how compressed, containerized and obfuscated, if there's already a signature which matches something in the raw file (that is, before any extraction and/or decoding takes

Re: [clamav-users] Multiple Streams embedded as base64 inside xml

2020-04-24 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 23 Apr 2020, Görkem ÇINAR via clamav-users wrote: I have an xml file which has list of pdf files embedded as base64. When I scan that xml file, does it also scans those base64 content inside that xml or do i need to convert those base64 contents into different streams and sca

Re: [clamav-users] IP Blacklisted by Mirror

2020-04-24 Thread Kamil Wójcik via clamav-users
Thanks all for replies. I manage to find root cause of the issue. My infrastructure is hosted on EC2 with EC2 instance having public IP assigned. I’m using dockerized version of clamav. Due to OOM, container got into kind of CrashLoopBackOff situation. It was crashing during signature update an

Re: [clamav-users] about clamd boot sequence on Linux system.

2020-04-24 Thread Tsutomu Oyamada
Hi, Thank you for your reply. I'm sorry for the slow reply. I understood that there were two processes when clamd was started. In addition, since the DB load time of clamd varies depending on the amount of memory installed in the system, the existence time of the two processes varies depending on