Hi @all,
is this a wanted behavior of clamscan ?
# file /var/lib/nepenthes/var/log/binaries-2007-01-05.bz2
/var/lib/nepenthes/var/log/binaries-2007-01-05.bz2: bzip2 compressed
data, block size = 900k
# tar -tjf /var/lib/nepenthes/var/log/binaries-2007-01-05.bz2
binaries/0acb1b025e9efaa56d1260bc7791dfbf
binaries/df7dad3dffe099dab7fb0eeec71ca56d
# clamscan --tar --unzip --unrar --arj --unzoo --lha --jar --deb
--tgz /var/lib/nepenthes/var/log/binaries-2007-01-05.bz2
/var/lib/nepenthes/var/log/binaries-2007-01-05.bz2: OK
----------- SCAN SUMMARY -----------
Known viruses: 86098
Engine version: 0.88.7
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.07 MB
Time: 4.980 sec (0 m 4 s)
i extracted the files and created a rar with them
# rar l /tmp/test.rar
RAR 3.50 beta 1 Copyright (c) 1993-2005 Alexander Roshal 30 Mar 2005
Shareware version Type RAR -? for help
Archive /tmp/test.rar
Name Size Packed Ratio Date Time Attr CRC
Meth Ver
-------------------------------------------------------------------------------
0acb1b025e9efaa56d1260bc7791dfbf 8192 8170 99% 05-01-07 22:47
-rw-r--r-- 96E66790 m3b 2.9
df7dad3dffe099dab7fb0eeec71ca56d 65440 62519 95% 06-01-07 00:13
-rw-r--r-- 6D7B3871 m3b 2.9
-------------------------------------------------------------------------------
2 73632 70689 96%
# clamscan --tar --unzip --unrar --arj --unzoo --lha --jar
--deb --tgz /tmp/test.rar
/tmp/test.rar: RAR module failure
UNRAR 3.50 beta 3 freeware Copyright (c) 1993-2005 Alexander Roshal
Extracting from /tmp/test.rar
Creating tmp OK
Creating tmp/binaries OK
Extracting tmp/binaries/0acb1b025e9efaa56d1260bc7791dfbf
OK
Extracting tmp/binaries/df7dad3dffe099dab7fb0eeec71ca56d
OK
All OK
/tmp/clamav-cb6b7e652e3ad36a/tmp/binaries/0acb1b025e9efaa56d1260bc7791dfbf:
Trojan.Sdbot-3656 FOUND
/tmp/clamav-cb6b7e652e3ad36a/tmp/binaries/df7dad3dffe099dab7fb0eeec71ca56d: OK
/tmp/test.rar: Infected.Archive FOUND
----------- SCAN SUMMARY -----------
Known viruses: 86098
Engine version: 0.88.7
Scanned directories: 3
Scanned files: 3
Infected files: 1
Data scanned: 0.13 MB
Time: 10.722 sec (0 m 10 s)
--
Michael Lang <[EMAIL PROTECTED]>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
