Re: [clamav-users] Extremely slow PDF file scanning

2021-10-04 Thread Nikolay Belaevski via clamav-users
Any feedback from ClamAV developers, please: should I open a defect for the problem or is it expected that PDF file scanning takes few minutes? Thanks, Nikolay From: Nikolay Belaevski Date: Saturday, September 25, 2021 at 11:32 To: ClamAV users ML Subject: Re: [clamav-users] Extremely slow P

Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread Andrew C Aitchison via clamav-users
What are the compressed and uncompressed sizes of the problem file ? On Fri, 1 Oct 2021, Max Allan via clamav-users wrote: Hi, I have a requirement (from the business) to AV scan all docker containers we create. I started experimenting with tomcat:latest, which is handy because you can follow

Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread G.W. Haywood via clamav-users
Hi there, On Mon, 4 Oct 2021, Max Allan via clamav-users wrote: ... if the AV scanner has stopped scanning before everything was scanned, it MAY be infected and I cannot allow the file in. As a result of collecting statistics on mail servers for some years, my estimate of probability that Cla

Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread Mark Fortescue via clamav-users
Hi Max, Please be aware that at present, ClamAV can't scan files above 2G because of internal variable limitations. If your ZIP files are around 2G then this may be the limit you are encountering. Regards Mark. On 04/10/2021 09:37, Max Allan via clamav-users wrote: Thanks Laurent,

Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread Max Allan via clamav-users
Thanks Laurent, The results say : "Infected files: 1". Therefore our automated systems cannot differentiate between this file being infected and not. And if the AV scanner has stopped scanning before everything was scanned, it MAY be infected and I cannot allow the file in. If it went above a lim