SOLVED Clamav Error In Logs

[nootkan]

Hey everyone, received this error the last 3 days but before that all worked fine.

Any ideas why this is happening?

LibClamAV info: scancws: Error decompressing SWF file. Scanning what was decompressed.
LibClamAV Warning: SWF: declared output length != inflated stream size, 25024 != 40

Server details:
Centos 7.9 2009 Standard
cPanel Version 104.0 (build 7)
Apache Version 2.4.54
PHP Version 7.4.30
MySQL Version 5.7.39
Architecture x86_64
Operating System linux
Perl Version 5.16.3
Kernel Version 3.10.0-1160.49.1.el7.x86_64

 

[cPRex]

Hey there! ClamAV seems to struggle with Flash files, as this has been going on for some time:

What's causing this ClamAV error?

I'm using ClamAV within a script to scan a selection of directories. The command used is clamscan -ri "$dir". Recently I've encountered the following error message: LibClamAV Warning: SWF: declared

askubuntu.com

From what I am seeing, it either isn't guessing the length of the file correctly, or there is an issue with that particular file that needs to be examined.

 

[nootkan]

Thanks CPRex, but not sure why it is trying to scan flash files as I have none on my server that I am aware of. Maybe it is a hacker or spammer trying to send an email with a flash file?

 

[cPRex]

It's also completely possible the file isn't a Flash file at all, as there are also mentions of it not interpreting those correctly.

 

[nootkan]

Thought I'd mark this as solved as it hasn't happened again since this post.

 

[cPRex]

I'm glad to hear this is working well and I'll get this marked as solved.