Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.48k stars 708 forks source link

Threats listed as "None" filename if the directory has a "&" character #1392

Closed All3xJ closed 2 weeks ago

All3xJ commented 1 month ago

Describe the bug

Threats listed after scan complete have a "None" filename if directory contains the "&" character.

How to reproduce the problem

-Run a scan in a directory that contains "&" character

Attachments

image

micahsnyder commented 1 month ago

We don't make a GUI for ClamAV. I suspect the bug is in the GUI recording the results from ClamAV. What GUI are you using for ClamAV?

If I test this with the clamscan utility, it works okay:

❯ mkdir "Allie & Betty"

❯ cp ~/eicar ./Allie\ \&\ Betty/

❯ ~/clams/1.4.1/bin/clamscan -d ~/.cvdupdate/database ./Allie\ \&\ Betty/
Loading:    18s, ETA:   0s [========================>]    8.70M/8.70M sigs
Compiling:   2s, ETA:   0s [========================>]       41/41 tasks

/home/micah/Allie & Betty/eicar: Win.Test.EICAR_HDB-1 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 8701623
Engine version: 1.4.1
Scanned directories: 1
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 22.352 sec (0 m 22 s)
Start Date: 2024:10:28 09:45:35
End Date:   2024:10:28 09:45:57
All3xJ commented 2 weeks ago

We don't make a GUI for ClamAV. I suspect the bug is in the GUI recording the results from ClamAV. What GUI are you using for ClamAV?

clamtk, sorry I thought it was maintained by this repo