Mailing List Archive

It appears that this warning was added by accident while fixing a bug shortly before release and no one noticed in review. We'll remove the warning in 1.1.1 and 1.2.0.

Sorry for the confusion!

Regards,
Micah



Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Ralf Hildebrandt via clamav-users <clamav-users@lists.clamav.net>
Sent: Tuesday, May 16, 2023 1:08 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: Ralf Hildebrandt <Ralf.Hildebrandt@charite.de>
Subject: [clamav-users] LibClamAV Warning: Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0

clamav-1.1.0-1:
===============

May 16 10:00:23 de freshclam[864]: Tue May 16 10:00:23 2023 -> daily database available for update (local version: 26907, remote version: 26908)
May 16 10:00:23 de freshclam[864]: WARNING: Tue May 16 10:00:23 2023 -> ******* RESULT 200, SIZE: 7213 *******

Why does an 200 return code ("OK") warrant a warning?

May 16 10:00:24 de freshclam[864]: Tue May 16 10:00:24 2023 -> Testing database: '/var/lib/clamav/tmp.c022cc91c3/clamav-9a70f6b397596656b8338e5caf1d6bc7.tmp-daily.cld' ...
May 16 10:00:27 de freshclam[816014]: Tue May 16 10:00:27 2023 -> [LibClamAV] Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0
May 16 10:00:27 de freshclam[816014]: Tue May 16 10:00:27 2023 -> [LibClamAV] cli_ac_addsig: cannot use filter for trie

Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0
sounds a bit worrying...

May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> Database test passed.

but alas, despite errors the Database test passed?

May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> daily.cld updated (version: 26908, sigs: 2034816, f-level: 90, builder: raynman)
May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> Clamd successfully notified about the update.
May 16 10:00:33 de clamd[686]: LibClamAV Warning: Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0
May 16 10:00:33 de clamd[686]: LibClamAV Warning: cli_ac_addsig: cannot use filter for trie

--
Ralf Hildebrandt
Charit? - Universit?tsmedizin Berlin
Gesch?ftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebrandt@charite.de
https://www.charite.de
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat