Linux Lite Forums

General => Security & Bug Fixes => Topic started by: Searchernow on July 06, 2019, 01:33:02 PM

Title: ClamAv results query
Post by: Searchernow on July 06, 2019, 01:33:02 PM
After doing a full system scan I have got messages in the terminal during the scan (just a representative selection here)

LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0
LibClamAV Warning: fmap_readpage: pread fail: asked for 4089 bytes @ offset 7, got 0
LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0
WARNING: Can't open file /sys/module/psmouse/uevent: Permission denied
....

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes


the other couple of hundred lines (or so) are similar, i.e. the 3 types of warning above.

Need I worry about any of this?
Title: Re: ClamAv results query
Post by: bitsnpcs on July 06, 2019, 01:37:59 PM
Hello Searchernow,

there is this answer for this topic explaining it need not scan these locations as virus cannot live there, and the link also shows the command to tell ClamAv to ignore it - https://askubuntu.com/questions/591964/clamav-cant-read-file-error (https://askubuntu.com/questions/591964/clamav-cant-read-file-error)
Title: Re: ClamAv results query
Post by: Searchernow on July 06, 2019, 03:10:13 PM
Thanks Bitsnpcs,

for that linked reply, but it only refers to /sys files, but says nothing about the other 2 warnings, eg:

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes
Title: Re: ClamAv results query
Post by: bernard stafford on July 06, 2019, 06:08:35 PM
This is the documentation for Clam AV Manual    https://www.clamav.net/documents/clam-antivirus-0-101-0-user-manual (https://www.clamav.net/documents/clam-antivirus-0-101-0-user-manual)   
According to Ask Ubuntu it is a good idea to have Clam TK,with Clam AV.
This gives you a GUI interface to scan with. 
What you may be seeing could be that Clam AV not being able to access Root Files. [log in as Root] 
I will refer you to the Documentation Manual. 
The other explanation:
Clam AV can read these directories, but they contain "files" that aren't really data or executable.
 Everything in /dev/ represents a piece of hardware.
 /proc/ contains files that represent running processes.
 /sys/ contains real-time system info/settings. So when Clam scan tries to scan these it probably gets confused.
Title: Re: ClamAv results query
Post by: bitsnpcs on July 07, 2019, 07:16:21 PM
Thanks Bitsnpcs,

for that linked reply, but it only refers to /sys files, but says nothing about the other 2 warnings, eg:


You are Welcome :)
I was unable to find anything more comprehensive.

The information supplied by @bernard stafford is comprehensive.
Title: Re: ClamAv results query
Post by: bernard stafford on July 07, 2019, 07:52:38 PM
I only try to provide what information that i can find that fits the cause,
problem. We can call those "Tools", necessary for others, like your self.
To fix the problem at hand, ie.. Provided was complex tools,you your self
can fix very complex  problems. Keep up the good work. Linux seems to be your
forte. you do just as well as I if not a better job than I. Together we are LINUX.
Alone we are one user of a operating system called LINUX.     8)
 
Title: Re: ClamAv results query
Post by: bitsnpcs on July 07, 2019, 09:06:34 PM
You are right  8) is better when we can all work together  8)
Title: Re: ClamAv results query
Post by: Searchernow on July 08, 2019, 05:42:00 AM
Thanks Bernard,

I'll set aside some time later to look at that and I'll let you know.