On Fri, 14 May 2004 02:23:16 +1000
Alex Cherney <[EMAIL PROTECTED]> wrote:

> Hi,
> 
> password protected rar files (rar version 2) seem to cause problems to
> 
> clamscan:
> 
> clamscan.exe error.rar
> error.rar: RAR module failure.
> error.rar: OK
> 
> ----------- SCAN SUMMARY -----------
> Known viruses: 20498
> Scanned directories: 0
> Scanned files: 1
> Infected files: 0
> Data scanned: 0.01 MB
> I/O buffer size: 131072 bytes
> Time: 0.353 sec (0 m 0 s)
> 
> An exmaple is attached, password is clamav, rar 2.90 decrypts it okay.

The "(un)store" method is not supported, that's why the internal module
reports an error and the archive can be later extracted with an external
unpacker (of course in this case (password protection) it will not be
unpacked):

[EMAIL PROTECTED]:/tmp$ clamscan --unrar error.rar 
/tmp/error.rar: RAR module failure.

UNRAR 3.00 freeware      Copyright (c) 1993-2002 Eugene Roshal


Extracting from /tmp/error.rar

Extracting  error.png                                                
77%
Encrypted file:  CRC failed in error.png (password incorrect ?)
Total errors: 1
(raw) /tmp/error.rar: OK

----------- SCAN SUMMARY -----------
Known viruses: 21522
Scanned directories: 1
Scanned files: 1
Infected files: 0
Data scanned: 0.01 MB
I/O buffer size: 131072 bytes
Time: 4.929 sec (0 m 4 s)

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu May 13 20:29:20 CEST 2004

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to