LibClamAV Warnings

Discussions relating to ClamXav

Moderator: Mark

LibClamAV Warnings

Postby MLB » Wed 10 May 2017 10:59 pm

Have seen these messages pop up in recent scan logs:

LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes
LibClamAV Warning: Bytecode run timed out in interpreter after 442405000 opcodes
LibClamAV Warning: Bytcode 46 failed to run: Time limit reached

Any idea what's causing these and what should be done about them? I appreciate the help!
Posts: 20
Joined: Thu 03 Jan 2013 5:10 am

Re: LibClamAV Warnings

Postby alvarnell » Wed 10 May 2017 11:40 pm

I know there was a faulty ByteCode signature causing issues that was removed late yesterday. Let me check something....

BC.Win.Packer.PECompact-6296858-2 was removed in bytecode - 298 in response to this discussion LibClamAV Warning, although the warnings were different, perhaps because it was a Windows installation.

Can you check your Update Log (freshclam.log) to see if you got "bytecode.cld updated (version: 298, sigs: 57, f-level: 63, builder: bbaker)" today?

If so, then it's something else and since I'm not seeing it I would have to believe that it is referring to a very large compressed file that can't be completely scanned and it looks like it gave up trying after some amount of time. You might be able to figure out what file it is from the log, but the standard answer regarding large files is "At this time, we're not aware of any malicious software which exceeds the file size ClamXav's scanning engine can handle, so the warning is nothing to worry about."
iMac(21.5-inch, Mid 2011) 2.8GHz Intel Core i7/OSX 10.10.5, 10.11.6, 10.12.6 & 10.13.6/ClamXAV v3.0.9 (7713)/0.100.2_01
iMac(Retina 5K, 27-inch, 2017) 4.2GHz Intel Core i7/macOS 10.12.6, 10.13.6 & 10.14.5/ClamXAV v3.0.11 (7899)/0.101.2_09
Site Admin
Posts: 5509
Joined: Thu 04 Sep 2008 1:18 am
Location: Mountain View, CA, USA

Return to ClamXav

Who is online

Users browsing this forum: No registered users