This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Linux Sophos AV can't read media files .VOB files

Hi,

I have installed sophos server linux endpoint protection. When scanning DVD's with adhoc scan form the cmd line, ie sudo savscan /media/<user>/<mountedDVD>/ -sc -rec -dn -c -archive -pua -suspicious --backtrack-protection --preserve-backtrack --examine-x-bit -all -di -eec

The scan errors with:

Could not check /media/<user>/<mountedDVD>/ VIDEO_TS/VTS_01_1.VOB (Virus scan failed)

Why can it not scan the .VOB files???

I think it maybe the sophos on access scanning denying access to the files. How do you config this?

This thread was automatically locked due to age.

0 QC over 6 years ago

Hello michael page,

on access scanning denying access
no, on-access is smart enough to identify the process that does the open. Even if it weren't it would log that it has denied access.
It's just this .VOB file, or some, or all .VOB files and on any DVD? DouglasLeeder can likely tell you more.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 6 years ago in reply to QC

savscan excludes itself from on-access scanning while accessing files for scanning.

I'm afraid I don't know why savscan would have problems scanning .vob files, but it may just not have any support, since I don't think there's any way for them to be infected.
Cancel
Vote Up 0 Vote Down

Cancel
0 michael page over 6 years ago in reply to DouglasLeeder

Sophos scan can scan the files using a windows machine with sophos installed. Seems to be just an access permission to the files. So could be a Linux permissions to the cdrom rather than sophos scan itself?
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 6 years ago in reply to michael page

It's possible that Sophos on Windows is just ignoring the file as uninfectable.

You could check for permissions issues by trying to copy the file onto your hard disc, then trying to scan it?
Cancel
Vote Up 0 Vote Down

Cancel