Re: [clamav-users] INSTREAM + eicar not well detected?

2022-03-04 Thread Tuomo Soini via clamav-users
On Thu, 3 Mar 2022 22:50:04 -0300 Jorge Elissalde via clamav-users wrote: > Hi, > > The weird part is that Avira and other Antivirus correctly are able to > detect EICAR in any case, having other characters before and/or after > the EICAR string. That is incorrectly detecting it. They must not

Re: [clamav-users] INSTREAM + eicar not well detected?

2022-03-04 Thread Andrew C Aitchison
On Fri, 4 Mar 2022, Tuomo Soini via clamav-users wrote: On Thu, 3 Mar 2022 22:50:04 -0300 Jorge Elissalde via clamav-users wrote: Hi, The weird part is that Avira and other Antivirus correctly are able to detect EICAR in any case, having other characters before and/or after the EICAR string.

Re: [clamav-users] INSTREAM + eicar not well detected?

2022-03-04 Thread G.W. Haywood via clamav-users
Hi there, Sorry, I should have spent more time looking into this. On Fri, 4 Mar 2022, Tuomo Soini via clamav-users wrote: That is incorrectly detecting it. They must not detect signature in the middle. That's clearly in specification. Long time ago there was big discussion about eicar detectio

Re: [clamav-users] Minor bug or working as intended?

2022-03-04 Thread Laurent S. via clamav-users
On Wednesday, March 2nd, 2022 at 18:37, Kris Deugau wrote: > Kris Deugau wrote: > > > For some types of content, just allowing a plain ASCII string instead of > > > > the hex-coded version of the same would be a big help. Or an > > > > enhancement in the current file formats allowing embedd

[clamav-users] Clamd non recursive MULTISCAN?

2022-03-04 Thread Jorge Elissalde via clamav-users
Hi, I'm trying to scan the files under c:\windows\system32 but excluding folders. I made a list of files and sent it to clamd using a session and SCAN command for every file, the whole process takes about 4 minutes (4200 files). If I send the command "MULTISCAN c:\windows\system32", the recursive

Re: [clamav-users] Clamd non recursive MULTISCAN?

2022-03-04 Thread G.W. Haywood via clamav-users
Hi there, On Fri, 4 Mar 2022, Jorge Elissalde via clamav-users wrote: ... If I send the command "MULTISCAN c:\windows\system32", the recursive scanning will scan everything including folders, which is not what I want. This scanning must be processed using multi threads ... Can you be more fo

Re: [clamav-users] Clamd non recursive MULTISCAN?

2022-03-04 Thread Jorge Elissalde via clamav-users
Thank you for your answer. Trying to be more forthcoming I can explain the code I'm making. - I get the full list of files under c:\windows\system32 folder, just files, not folders (4913 files in my case). - I send every file name to clamd using the SCAN command. The whole process takes almost 5

Re: [clamav-users] Clamd non recursive MULTISCAN?

2022-03-04 Thread Jorge Elissalde via clamav-users
Thank you for your answer. Trying to be more forthcoming I can explain the code I'm making. - I get the full list of files under c:\windows\system32 folder, just files, not folders (4913 files in my case). - I send every file name to clamd using the SCAN command. The whole process takes almost 5