[clamav-users] LibhClamAV Warning

[Anthony Magrone]

Thanks, Shawn. How can I discern which file is the source of the error? I located and removed two non-essential files with SWF in the title, but the error still occurs on a subsequent scan.

Regards,
Anthony

Hamlin & Burton
LIABILITY MANAGEMENT

Anthony Magrone
IT Administrator

321.972.0121 
hamlinandburton.com

Corporate Offices: Orlando, Florida
615 Crescent Executive Court, Suite 212, Lake Mary, FL 32746

Confidentiality and HIPAA Compliance Notice: This e-mail message, including any attachments, is intended for the named recipient(s) and may contain information that is (i) proprietary to the sender, and/or, (ii) privileged, confidential and/or otherwise exempt from disclosure under applicable state and federal law, including, but not limited to, privacy and security standards imposed pursuant to the federal Health Insurance Portability and Accountability Act of 1996 ("HIPAA").  Receipt by anyone other than the named recipient(s) is not a waiver of any applicable privilege. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

-----Original Message-----
From: clamav-users-bounces at lists.clamav.net [mailto:clamav-users-bounces at lists.clamav.net] On Behalf Of Shawn Webb
Sent: Wednesday, February 12, 2014 3:19 PM
To: ClamAV users ML
Subject: Re: [clamav-users] LibhClamAV Warning

On Wed, Feb 12, 2014 at 1:38 PM, Anthony Magrone < anthonymagrone at hamlinandburton.com> wrote:

> How can I address the following warning?
>
> /etc/cron.daily/autoclam:
>
> LibClamAV Warning: SWF: Invalid tag length.
> LibClamAV info: scancws: Error decompressing SWF file
>
> Regards,
> Anthony
>

Hey Anthony,

It looks like you might have a truncated file. The code that generates that warning message means that the part of the file ClamAV is processing has a size that is bigger than the file (meaning, potentially truncated file). If don't suspect that's the case and you have the file on hand, could you zip it up and send it my way?

Thanks,

Shawn
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml