I experience the same behavior, clamav does not detect a virus in a rar
file. I tested against the testfiles in clamav-testfiles

My packages:
# apt-cache policy rar unrar libclamav3 clamav clamav-testfiles
rar:
  Installed: 1:3.7.1-1
  Candidate: 1:3.7.1-1
  Version table:
 *** 1:3.7.1-1 0
        500 http://br.archive.ubuntu.com hardy/multiverse Packages
        100 /var/lib/dpkg/status
unrar:
  Installed: 1:3.7.8-1
  Candidate: 1:3.7.8-1
  Version table:
 *** 1:3.7.8-1 0
        500 http://br.archive.ubuntu.com hardy/multiverse Packages
        100 /var/lib/dpkg/status
libclamav3:
  Installed: 0.92.1~dfsg2-1.1
  Candidate: 0.92.1~dfsg2-1.1
  Version table:
 *** 0.92.1~dfsg2-1.1 0
        500 http://br.archive.ubuntu.com hardy/universe Packages
        100 /var/lib/dpkg/status
clamav:
  Installed: 0.92.1~dfsg2-1.1
  Candidate: 0.92.1~dfsg2-1.1
  Version table:
 *** 0.92.1~dfsg2-1.1 0
        500 http://br.archive.ubuntu.com hardy/universe Packages
        100 /var/lib/dpkg/status
clamav-testfiles:
  Installed: 0.92.1~dfsg2-1.1
  Candidate: 0.92.1~dfsg2-1.1
  Version table:
 *** 0.92.1~dfsg2-1.1 0
        500 http://br.archive.ubuntu.com hardy/universe Packages
        100 /var/lib/dpkg/status

The test:

# clamscan --unrar=/usr/bin/unrar /usr/share/clamav-testfiles
LibClamAV Warning: RAR code not compiled-in
/usr/share/clamav-testfiles/clam-v3.rar: OK
LibClamAV Warning: RAR code not compiled-in
/usr/share/clamav-testfiles/clam-v2.rar: OK
/usr/share/clamav-testfiles/clam.zip: ClamAV-Test-File FOUND
/usr/share/clamav-testfiles/clam.exe: ClamAV-Test-File FOUND
/usr/share/clamav-testfiles/clam.cab: ClamAV-Test-File FOUND
/usr/share/clamav-testfiles/clam.exe.bz2: ClamAV-Test-File FOUND

----------- SCAN SUMMARY -----------
Known viruses: 315653
Engine version: 0.92.1
Scanned directories: 1
Scanned files: 6
Infected files: 4
Data scanned: 0.00 MB
Time: 2.742 sec (0 m 2 s)

-- 
RAR code not compiled-in
https://bugs.launchpad.net/bugs/236720
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to