On 04/29/2015 06:20 PM, René Bellora wrote:
El 29/04/15 a las 13:04, jose-marcio martins da cruz escibió:

Hello,

I'm getting different results when scanning a infected email message.

On a Sparc Solaris 10 (32 bits compiled), clamdscan tels me that the
message is infected : "Heuristics.Encrypted.RAR FOUND"

Testing it on two 64 bits linux boxes (fedora and ubuntu), both tels
me that the message is clean.



linux 32bits also report the message clean (with "ArchiveBlockEncrypted
yes" in clamd.conf)

Hmmm...

On the Solaris boxes, there are libclamunrar* libraries, while there aren't at Linux boxes...

Clamav on Solaris boxes were compiled and installed from sources, while at Linux boxes they come from distros...

If I remember, there is a kind of licence problem with rar libraries...

Cheers,

José-Marcio


--

 Envoyé de ma machine à écrire.
 ---------------------------------------------------------------
  Spam : Classement statistique de messages électroniques -
         Une approche pragmatique
  Chez Amazon.fr : http://amzn.to/LEscRu ou http://bit.ly/SpamJM
 ---------------------------------------------------------------
 Jose Marcio MARTINS DA CRUZ            http://www.j-chkmail.org
 Ecole des Mines de Paris                   http://bit.ly/SpamJM
 60, bd Saint Michel                      75272 - PARIS CEDEX 06

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to