[clamav-users] LibClamAV Warning

[Matthew Molyett]

The bytecode signature behind this runtime error has been removed.

On Sat, May 6, 2017 at 2:13 PM, Rudy Stebih <clamavmirror at gmail.com> wrote:

> As I didn't hear back from anyone, I placed an exclude statement for the
> file just so that I could finish the scan. These warnings are halting the
> scan!
>
> Turns out I got a second LibClamAV warning after I excluded the first one:
>
> Scanning C:\Program Files (x86)\InstallShield Installation
> Information\{1FA41DBD-E8F8-46B1-A90C-1FA7E823DA58}\ISSetup.dll
> LibClamAV Warning: Bytecode runtime error at line 968, col 5
>
> Cheers,
> Rudy
>
>
>
>
> On Sat, May 6, 2017 at 11:07 AM, Joel Esler (jesler) <jesler at cisco.com>
> wrote:
>
> > I thought this was fixed.
> >
> > --
> > Sent from my iPhone
> >
> > > On May 6, 2017, at 14:01, Rudy Stebih <clamavmirror at gmail.com> wrote:
> > >
> > > I filed a bug report for this.  Bug #11837
> > >
> > > Cheers,
> > > Rudy
> > >
> > >
> > >> On Wed, May 3, 2017 at 1:25 PM, David Raynor <draynor at sourcefire.com>
> > wrote:
> > >>
> > >> Bump for visibility. I figure someone from your team should get in
> touch
> > >> with him, since it is not exactly an FP report. Maybe he can still
> > submit
> > >> it as FP. Don't know.
> > >>
> > >> Dave R.
> > >>
> > >> On Tue, May 2, 2017 at 10:05 PM, Rudy Stebih <clamavmirror at gmail.com>
> > >> wrote:
> > >>
> > >>> Hi Folks,
> > >>>
> > >>> I've been getting the following error for a week or so:
> > >>>
> > >>> 'LibClamAV Warning: Bytecode runtime error at line 1226, col 4'
> > >>>
> > >>> I finally found the time to run ClamAV in verbose mode and believe
> this
> > >> is
> > >>> the culprit:
> > >>>
> > >>> 'Scanning C:\Program Files (x86)\Applian Director\ClearRegCode.exe'
> > >>>
> > >>> At least that was the last file being scanned right before the error.
> > >>>
> > >>> I can upload the file somewhere if you like...
> > >>>
> > >>> Cheers,
> > >>> Rudy
> > >>> _______________________________________________
> > >>> clamav-users mailing list
> > >>> clamav-users at lists.clamav.net
> > >>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> > >>>
> > >>>
> > >>> Help us build a comprehensive ClamAV guide:
> > >>> https://github.com/vrtadmin/clamav-faq
> > >>>
> > >>> http://www.clamav.net/contact.html#ml
> > >>>
> > >>
> > >>
> > >>
> > >> --
> > >> ---
> > >> Dave Raynor
> > >> Talos Security Intelligence and Research Group
> > >> draynor at sourcefire.com
> > >> _______________________________________________
> > >> clamav-users mailing list
> > >> clamav-users at lists.clamav.net
> > >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> > >>
> > >>
> > >> Help us build a comprehensive ClamAV guide:
> > >> https://github.com/vrtadmin/clamav-faq
> > >>
> > >> http://www.clamav.net/contact.html#ml
> > >>
> > > _______________________________________________
> > > clamav-users mailing list
> > > clamav-users at lists.clamav.net
> > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> > >
> > >
> > > Help us build a comprehensive ClamAV guide:
> > > https://github.com/vrtadmin/clamav-faq
> > >
> > > http://www.clamav.net/contact.html#ml
> > _______________________________________________
> > clamav-users mailing list
> > clamav-users at lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> >
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>



-- 

Matthew Molyett
Malware Researcher

mmolyett at cisco.com
Phone:  (410) 309-4834
Mobile: (410) 674-2049

Cisco.com - http://www.cisco.com

This email may contain confidential and privileged material for the sole
use of the intended recipient. Any review, use, distribution or disclosure
by others is strictly prohibited. If you are not the intended recipient (or
authorized to receive for the recipient), please contact the sender by
reply email and delete all copies of this message.

For corporate legal information go to:
http://www.cisco.com/web/about/doing_business/legal/cri/index.html