[clamav-users] Eicar test string now returning Win.Trojan.Trojan-605

Matus UHLAR - fantomas uhlar at fantomas.sk
Thu May 19 09:11:18 EDT 2016


>>> LibClamAV Warning: cli_loadldb: logical signature for
>>> Win.Trojan.ssid18332-1 uses PCREs but support is disabled, skipping
>>> LibClamAV Warning: cli_loadldb: logical signature for
>>> Win.Ransomware.Locky-4 uses PCREs but support is disabled, skipping
>>> LibClamAV Warning: cli_loadldb: logical signature for
>>> Html.Exploit.CVE_2016_0184-1 uses PCREs but support is disabled,
>>> skipping
>
>> your clamav was build without pcre support. You have to compile a new
>> binary

On 19.05.16 12:59, Helmut Hullen wrote:
>Sorry - no. Configuring with "--disable_pcre" doesn't change this
>behaviour.

of course DISABLING does NOT help, you need to ENABLE it.
the whole problem comes out of the fact that PCRE is disabled...

in most linux distributions you need development packaged of pcre library.

>see
>        Ddpn+XSPCXB at helmut.hullen.de
>
>from 2016-05-14 ("yum-installing ClamAV in Amazon Linux")

the same mistake there.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar territory. 



More information about the clamav-users mailing list