| View previous topic :: View next topic |
| Author |
Message |
XenoTerraCide
Veteran
Joined: 18 Jan 2004
Posts: 1418
Location: MI, USA
|
 Posted: Sun Apr 09, 2006 12:08 am Post subject: Clamscan finds false positives? why?[solved] |
 |
|
Somehow I doubt any of these files are actually virii. | Code: | //usr/portage/distfiles/clamav-0.88.1.tar.gz: ClamAV-Test-File FOUND
//usr/share/apps/krita/templates/gray/.source/white_640x480.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/transparent_1280x1024.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/transparent_640x480.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/white_1024x768.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/white_640x480.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/transparent_1024x768.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/white_1600x1200.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/transparent_1600x1200.kra: Oversized.Zip FOUND
//usr/share/apps/krita/templates/rgb/.source/white_1280x1024.kra: Oversized.Zip FOUND
|
anyone have any Idea whay they are showing as positives? should I report what I assume are false positives to ClamAV?
_________________
I don't hang out here anymore, try asking on http://unix.stackexchange.com/ if you want my help.
Last edited by XenoTerraCide on Sun Apr 09, 2006 12:48 am; edited 1 time in total |
|
| Back to top |
|
 |
PMcCauley
Apprentice
Joined: 14 Mar 2006
Posts: 283
Location: Alberta, Canada
|
| Posted: Sun Apr 09, 2006 12:43 am Post subject: |
|
|
From http://www.clamav.net/faq.html.
| Quote: |
I get many false positives of Oversized.zip
Whenever a file exceeds ArchiveMaxCompressionRatio (see clamd.conf man page), it's considered a logic bomb and marked as Oversized.zip . Try increasing your ArchiveMaxCompressionRatio setting.
|
The other entry is a test file so shouldn't be a problem
Patrick |
|
| Back to top |
|
|
XenoTerraCide
Veteran
Joined: 18 Jan 2004
Posts: 1418
Location: MI, USA
|
| Posted: Sun Apr 09, 2006 12:47 am Post subject: |
|
|
yeah I kinda figured the one was a test. but I asked anyways. I was just surprised when I got 10 positives. Last year around this time different version of clamscan I didn't get a positive on a test files so I was wondering.
_________________
I don't hang out here anymore, try asking on http://unix.stackexchange.com/ if you want my help. |
|
| Back to top |
|
|
|
Networking & Security
