[clamav-users] How to fix: "LibClamAV Warning: cli_scangpt: detected a non-protective MBR"

[Micah Snyder (micasnyd)]

Good afternoon Vincenzo,

It looks as though ClamAV is parsing an image file containing a master boot record in the partition table that is non-protective:  See https://en.wikipedia.org/wiki/GUID_Partition_Table#Protective_MBR_.28LBA_0.29

The warning isn’t necessarily something you need to fix.  It’s just letting you know that the partition table in the image file is a little odd.  Perhaps an older style of MBR.

We should probably change the print statement so it is a debug level log message instead of a warning, because there likely isn’t anything “wrong” with the file being scanned.

For now, I’d just say don’t worry about it.

-Micah


Micah Snyder
Software Engineer
Talos
Cisco Systems, Inc.



On Feb 26, 2018, at 3:22 AM, Vincenzo Di Somma <vincenzo.di.somma at canonical.com<mailto:vincenzo.di.somma at canonical.com>> wrote:

Hi all,
on Ubuntu 16.04, when I run:
clamscan --max-filesize=3999M --phishing-scan-urls=no
--max-scansize=3999M -i -r /home/xyz/


I get this result:
LibClamAV Warning: cli_scangpt: detected a non-protective MBR
LibClamAV Warning: cli_scangpt: detected a non-protective MBR

----------- SCAN SUMMARY -----------
Known viruses: 6421244
Engine version: 0.99.3
Scanned directories: 20226
Scanned files: 298523
Infected files: 0
Data scanned: 168867.80 MB
Data read: 151491.15 MB (ratio 1.11:1)
Time: 12342.499 sec (205 m 42 s)

I wonder how I can fix: "LibClamAV Warning: cli_scangpt: detected a
non-protective MBR"

Thanks,
vds

_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml