General > Security & Bug Fixes

ClamAv results query

(1/2) > >>

Searchernow:
After doing a full system scan I have got messages in the terminal during the scan (just a representative selection here)

LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0
LibClamAV Warning: fmap_readpage: pread fail: asked for 4089 bytes @ offset 7, got 0
LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0
WARNING: Can't open file /sys/module/psmouse/uevent: Permission denied
....

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes


the other couple of hundred lines (or so) are similar, i.e. the 3 types of warning above.

Need I worry about any of this?

bitsnpcs:
Hello Searchernow,

there is this answer for this topic explaining it need not scan these locations as virus cannot live there, and the link also shows the command to tell ClamAv to ignore it - https://askubuntu.com/questions/591964/clamav-cant-read-file-error

Searchernow:
Thanks Bitsnpcs,

for that linked reply, but it only refers to /sys files, but says nothing about the other 2 warnings, eg:

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes

bernard stafford:
This is the documentation for Clam AV Manual    https://www.clamav.net/documents/clam-antivirus-0-101-0-user-manual   
According to Ask Ubuntu it is a good idea to have Clam TK,with Clam AV.
This gives you a GUI interface to scan with. 
What you may be seeing could be that Clam AV not being able to access Root Files. [log in as Root] 
I will refer you to the Documentation Manual. 
The other explanation:
Clam AV can read these directories, but they contain "files" that aren't really data or executable.
 Everything in /dev/ represents a piece of hardware.
 /proc/ contains files that represent running processes.
 /sys/ contains real-time system info/settings. So when Clam scan tries to scan these it probably gets confused.

bitsnpcs:

--- Quote from: Searchernow on July 06, 2019, 03:10:13 PM ---Thanks Bitsnpcs,

for that linked reply, but it only refers to /sys files, but says nothing about the other 2 warnings, eg:


--- End quote ---

You are Welcome :)
I was unable to find anything more comprehensive.

The information supplied by @bernard stafford is comprehensive.

Navigation

[0] Message Index

[#] Next page

Go to full version