clamav-users December 2010 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: [clamav-users] Why does virus name now include siz

[clamav-users] Why does virus name now include size and hash ?

From: David Shrimpton <d.shrimpton_at_nospam>
Date: Thu Dec 09 2010 - 14:16:21 GMT
To: Clamav-Users <clamav-users@lists.clamav.net>

Hi,

Since upgrading from 0.96.1 to 0.96.5 virus names
returned by clamd in response to a SCAN command
now include a md5 hash of the file and the file size

eg

WM.Psycho(773c612cc779a3433ff5fa16ceeea6a4:51712)

instead of

WM.Psycho

Clamdscan will just return WM.Psycho as before.

Setting

ExtendedDetectionInfo no

in clamd.conf and restarting clamd seems
to have no influence over this.

Is there a way of turning off the hash and file size in
the virus name returned in response to a SCAN
command , (rather than writing a regex to parse
the result )?

-- David Shrimpton Systems Programmer ITS University of Queensland _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml