Try adding this to your command line: --max-ratio 0 The support compression ratio feature (--max-ratio). Overly compressed files may get falsely detected. I believe the 0 turns it off. it worked for me.
----- Original Message ----- From: "Hirthe, Alexander" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Thursday, February 17, 2005 11:34 AM Subject: [Declude.Virus] ClamAV? > Hello, > > I'm getting errors with Zip Files larger than about 10 MB. > > In the virus.log: > 02/17/2005 17:12:03 Qbede796f012201de MIME file: 123.zipxxx [base64; > Length=13024694 Checksum=1676135806] > 02/17/2005 17:12:07 Qbede796f012201de Scanner 3: Virus= Attachment= [6] O > 02/17/2005 17:12:07 Qbede796f012201de File(s) are INFECTED [: 1] > 02/17/2005 17:12:07 Qbede796f012201de Scanned: CONTAINS A VIRUS [MIME: 2 > 13024860] > The file is without any virus. Sure :) > > from virus.cfg: > SCANFILE3 C:\clamav-devel\bin\clamscan.exe --quiet --log-verbose > --no-summary -l report.txt > VIRUSCODE3 1 > REPORT3 FOUND > > Has anyone else such errors? > The user told me, this could/would happen with all zipped files larger than > 6 MB. > > Alex > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
