"G.W. Haywood" <clamav@jubileegroup.co.uk> wrote:

If I wanted to know which file was triggering the warning in this case
I'd start with a scan of

/Users/mnewman/Downloads/gettext-0.19.6-MACOS-10.11-10.12-SDK-10.11.pkg

Thank you for taking the time to write such a clear and informative explanation.

You nailed it:

MrMuscle:Downloads mnewman$ clamscan gettext-0.19.6-MACOS-10.11-10.12-SDK-10.11.pkg

LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes

gettext-0.19.6-MACOS-10.11-10.12-SDK-10.11.pkg: OK

Thanks again.