Whenever I run ClamWin 0.98.5 on certain directories, it shows a number of errors in the log file. One directory is strictly large .mkv files and the other is a backup directory with many different file types from another PC. There are 277 files in the directory with .mkv files and the summary shows 183 scanned with 94 errors. All of the files are larger than the 100MB limit so none of them should be scanned yet it still reports errors. I'm trying to determine what is causing the errors but am not having any luck. I've added the --verbose parameter and all it does is list the files with no indication of if an error was encountered. Tried the --debug parameter too but it doesn't seem to do anything. Any suggestions for how to get more info on this?

Known viruses: 3707332
Engine version: 0.98.5
Scanned directories: 1
Scanned files: 183
Infected files: 0
Total errors: 94
Data scanned: 0.00 MB
Data read: 307535.53 MB (ratio 0.00:1)
Time: 13.439 sec (0 m 13 s)

I notice on mine that ClamWin still shows access denied files on all files, even if it exceeds the limits. Have you tried a complete uninstall and reinstall of ClamWin?

Just did an uninstall/reinstall and still get the same issue though the number of errors has changed. Interesting since nothing in the directory has changed.

----------- SCAN SUMMARY -----------
Known viruses: 3708602
Engine version: 0.98.5
Scanned directories: 1
Scanned files: 209
Infected files: 0

Total errors: 68
Data scanned: 0.00 MB
Data read: 307535.53 MB (ratio 0.00:1)
Time: 14.250 sec (0 m 14 s)

Perhaps ClamWin (or the Clam AV scan engine) just can't handle files with those extensions.

Regards,

MKV is a fairly popular media container format, similar to MP4. It would be quite sad if ClamWin/ClamAV didn't support it.

ClamAV usually only adds extension if they already have a signature for it. If it does not support it, then they never ran across a file with .MKV as infected. If they do, they will add support.

Something ClamAV should do is add a updater, like how they update malware signatures, for adding newer extensions so we don't have to wait a month or more later if they run across samples with non-existing extensions in the engine.

Since MKV is actually a container, it might come in to play here. I don't believe I have any MKV files to check this out. Try to scan just 1 of yours and see what happens--see if you get an error. If this is the case, a temporary fix is to exclude that extension from your scans. ClamWin will still scan an individual file, however, even if the extension is whitelisted. The whitelist is only for scanning folders.

Regards,