Hi Mark, all:

 

I’m disappointed to hear that it is still slow for you.

 

We found that the target-type of signatures used for PhishTank.Phishing signatures were causing a significant slowdown.   We have dropped them as of this past Saturday ( https://lists.gt.net/clamav/virusdb/75279 ) and in the last two updates have been re-adding them with more specific scan target types.  We’re now investigating some other optimizations we can make for the next major ClamAV release to improve scan times but at present we don’t have any other leads for signatures that may be slowing down scans.

 

Regards,

Micah

 

 

From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Mark Allan via clamav-users <clamav-users@lists.clamav.net>
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
Date: Monday, March 25, 2019 at 9:37 AM
To: ClamAV users ML <clamav-users@lists.clamav.net>
Cc: Mark Allan <markjallan@gmail.com>
Subject: Re: [clamav-users] Scan very slow

 

Cheers Steve,

 

In the interest of completeness, here's the scan from today (TXT from DNS: 0.101.1:58:25399:1553509741:1:63:48528:328) showing a marked improvement in scan time, although at 6m 7s it's still almost twice what it used to be.

 

Mark

 

On Mon, 25 Mar 2019 at 12:56, Steve Basford <steveb_clamav@sanesecurity.com> wrote:

On 2019-03-25 10:52, Mark Allan via clamav-users wrote:
> Hi all,
>
te.
>
> Hopefully this helps someone to narrow things down a bit.
>
> Mark
>

18/3/19         10m 49s         TXT from DNS:
0.101.1:58:25392:1552904941:1:63:48507:328      ***

Here's the changes for the above update:

https://lists.gt.net/clamav/virusdb/75154

You can also check sigs quickly per update:

https://lists.gt.net/clamav/virusdb/



--
Cheers,

Steve
Twitter: @sanesecurity

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml