[clamav-users] Detection in windows but not Linux

Al Varnell alvarnell at mac.com
Mon Dec 14 00:00:19 UTC 2015


I would want to know the results of using the test signature on both systems first, and file a bug report if it turns out to be a ClamAV problem.

Sent from Janet's iPad

-Al-

On Dec 13, 2015, at 11:49 AM, Kurt Fitzner wrote:
> The question remains as to why the signature correctly leads to a match in Windows but not Linux.  If carriage return linefeed handling differences between the two OSes are to blame, then I suggest a two pronged approach.  Correct the signatures, AND patch clamav so that the signatures as written are processed the same way.  Even if they are suboptimal signatures, I'd suggest they should be processed the same way on all platforms.
> 
> That's a lot of signatures that may not be working. Perhaps I'm stating the obvious, but if CR/LF are involved, it means these are likely scripts and such... just the kind of signatures that would be important to catch in Linux.



More information about the clamav-users mailing list