Try adding this to your command line:
--max-ratio 0
The support compression ratio feature (--max-ratio). Overly compressed files
may get falsely detected. I believe the 0 turns it off.
it worked for me.
----- Original Message -----
From: "Hirthe, Alexander" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, February 17, 2005 11:34 AM
Subject: [Declude.Virus] ClamAV?
Hello,
I'm getting errors with Zip Files larger than about 10 MB.
In the virus.log:
02/17/2005 17:12:03 Qbede796f012201de MIME file: 123.zipxxx [base64;
Length=13024694 Checksum=1676135806]
02/17/2005 17:12:07 Qbede796f012201de Scanner 3: Virus= Attachment= [6] O
02/17/2005 17:12:07 Qbede796f012201de File(s) are INFECTED [: 1]
02/17/2005 17:12:07 Qbede796f012201de Scanned: CONTAINS A VIRUS [MIME: 2
13024860]
The file is without any virus. Sure :)
from virus.cfg:
SCANFILE3 C:\clamav-devel\bin\clamscan.exe --quiet --log-verbose
--no-summary -l report.txt
VIRUSCODE3 1
REPORT3 FOUND
Has anyone else such errors?
The user told me, this could/would happen with all zipped files larger
than
6 MB.
Alex
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
