Hi James, 

It looks like you might have a semi-broken installation. In your output I see "/usr/local/bin/vol.py" and also "/opt/volatility-2.2". When you installed, did you run setup.py or did you just extract the archive you downloaded from https://code.google.com/p/volatility/downloads/list and copy vol.py to /usr/local/bin? Is this the only version of volatility you installed or have you used older versions in the past that might not have been removed properly?

I'm positive the error doesn't occur in "normal" installations. You might try running "make clean" inside the /opt/volatility-2.2 directory to remove any stale/old compiled .pyc files and then re-running yarascan. 

Let us know how it goes, 
MHL


On Wed, Apr 3, 2013 at 4:22 PM, James Lay <jlay@slave-tothe-box.net> wrote:
Topic says it...here's what I'm looking at:

Volatile Systems Volatility Framework 2.2
Traceback (most recent call last):
  File "/usr/local/bin/vol.py", line 186, in <module>
    main()
  File "/usr/local/bin/vol.py", line 168, in main
    command = cmds[module](config)
  File "/opt/volatility-2.2/volatility/plugins/malware/malfind.py", line 347, in __init__
    help = 'Match wide (unicode) strings')
  File "/opt/volatility-2.2/volatility/conf.py", line 364, in add_option
    self.optparser.add_option("-{0}".format(short_option), "--{0}".format(option), **args)
  File "/usr/lib/python2.7/optparse.py", line 1020, in add_option
    self._check_conflict(option)
  File "/usr/lib/python2.7/optparse.py", line 995, in _check_conflict
    option)
optparse.OptionConflictError: option -W/--wide: conflicting option string(s): -W

Any hints on how to get yarascan to run?  Thank you.

James
_______________________________________________
Vol-users mailing list
Vol-users@volatilityfoundation.org
http://lists.volatilesystems.com/mailman/listinfo/vol-users