Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

clamscan doesn't terminate

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


zut at trinite

Jul 28, 2009, 2:59 AM

Post #1 of 2 (565 views)
Permalink
clamscan doesn't terminate

I tried using clamscan to scan all homedirs on my server. But it the
program halts on certain files. It just hang, using almost no cpu/
memory.

One of these files is the windows 95 EXPLORER.EXE (don't ask me what
it does on a linux server, it's not my homedir :P).

The debug output when using clamscan -v --debug EXPLORER.EXE can be
downloaded from http://trinite.mine.nu/clamav/debug_log.txt . The .exe
itself can be downloaded from http://trinite.mine.nu/clamav/EXPLORER.EXE

It is a (hardened) server with PaX and I'm using the following use
flags:

[ebuild R ] app-antivirus/clamav-0.95.2 USE="bzip2 -clamdtop -
iconv -ipv6 -milter (-selinux)" 0 kB

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


edwintorok at gmail

Jul 28, 2009, 9:38 AM

Post #2 of 2 (506 views)
Permalink
Re: clamscan doesn't terminate [In reply to]

On 2009-07-28 12:59, Gerard Bos wrote:
> I tried using clamscan to scan all homedirs on my server. But it the
> program halts on certain files. It just hang, using almost no cpu/memory.
>
> One of these files is the windows 95 EXPLORER.EXE (don't ask me what
> it does on a linux server, it's not my homedir :P).
>
> The debug output when using clamscan -v --debug EXPLORER.EXE can be
> downloaded from http://trinite.mine.nu/clamav/debug_log.txt . The .exe
> itself can be downloaded from http://trinite.mine.nu/clamav/EXPLORER.EXE
>
> It is a (hardened) server with PaX and I'm using the following use flags:
>
> [ebuild R ] app-antivirus/clamav-0.95.2 USE="bzip2 -clamdtop
> -iconv -ipv6 -milter (-selinux)" 0 kB

The debug log has a lot of "cli_seeksect: lseek() failed", though that
shouldn't cause an infinite loop.
Please open a bugreport at bugs.clamav.net, and attach a strace of
clamscan, using something like:
$ touch empty.pdb && strace clamscan --debug -dempty.pdb EXPLORER.EXE
2>trace

Also include your CFLAGS, and output from clamconf.

A gdb stacktrace would be useful too, do something like:
$ gdb clamscan
(gdb) r --debug EXPLORER.EXE
....
... hangs ...
... Press CTRL-C ...
(gdb) bt full



Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.