On 31 March 2017 18:45:58 Mark Foley wrote:
Per advice on this list, I downloaded and installed the clamav-unofficial-sigs
scripts from the link on Sanesecurity.
2. I run a cron'd clamscan job to scan mail folders several time a day. I get
the following errors which are new since installin
They can be ignored. For yara rules, ClamAV currently ignores any
containing errors or unsupported features.
Steve
On Fri, Mar 31, 2017 at 2:30 PM, Mark Foley wrote:
> On Fri, 31 Mar 2017 14:01:29 -0400 Steven Morgan
> wrote:
> >
>
> Thanks Steve. Is then there a way to disable the pe rules or
On Fri, 31 Mar 2017 14:01:29 -0400 Steven Morgan wrote:
>
Thanks Steve. Is then there a way to disable the pe rules or do I just have to
ignore these messages?
--Mark
> Mark,
>
> The pe import module of yara rules is not currently implemented in ClamAV.
> Other specifics of using yara rules in
Mark,
The pe import module of yara rules is not currently implemented in ClamAV.
Other specifics of using yara rules in Clam may be found in
docs/signatures.pdf. Also, looks like errors in EMAIL_Cryptowall.yar yara
rule?
Hope this helps,
Steve
On Fri, Mar 31, 2017 at 1:45 PM, Mark Foley wrote: