Hey clamav users,
I am trying to scan "ar archive" format like .deb packages are. ClamAV
unfortunately does not detect the eicar inside the ar archive.
Do I miss something to configure so clamav scans/unpacks "ar archive"
formats correctly?
##Virus not found
##clam(d)scan does not detect any virus in ar archive file type
root@vmdxyz:/tmp# clamdscan testvirus.deb
/tmp/gimp/gimp2/gimp3/testvirus.deb: OK
Informations:
## ar file type
root@vmdxyz:/tmp# file testvirus.deb
testvirus.deb: current ar archive
#ar file list with eicar.txt inside
root@vmdxyz:/tmp# ar t testvirus.deb
eicar.txt
debian-binary
#for comparison: .tar.gz eicar inside is detected
root@vmdxyz:/tmp# clamdscan eicar.txt.tar.gz
/tmp/eicar.txt.tar.gz: Eicar-Signature FOUND
Thanky for any help to detect viruses in "ar archive" formats with
clamav :-o :-)
All the best
Schroeffu
I am trying to scan "ar archive" format like .deb packages are. ClamAV
unfortunately does not detect the eicar inside the ar archive.
Do I miss something to configure so clamav scans/unpacks "ar archive"
formats correctly?
##Virus not found
##clam(d)scan does not detect any virus in ar archive file type
root@vmdxyz:/tmp# clamdscan testvirus.deb
/tmp/gimp/gimp2/gimp3/testvirus.deb: OK
Informations:
## ar file type
root@vmdxyz:/tmp# file testvirus.deb
testvirus.deb: current ar archive
#ar file list with eicar.txt inside
root@vmdxyz:/tmp# ar t testvirus.deb
eicar.txt
debian-binary
#for comparison: .tar.gz eicar inside is detected
root@vmdxyz:/tmp# clamdscan eicar.txt.tar.gz
/tmp/eicar.txt.tar.gz: Eicar-Signature FOUND
Thanky for any help to detect viruses in "ar archive" formats with
clamav :-o :-)
All the best
Schroeffu