> The way to get results of scanning of all files in a zip file is 
> disabling built-in archive support in libclamav (--disable-archive) and 
> enabling scanning with external unzip program (--unzip[=FULLPATH]). 
>  
> The examples of scanning a zip file contaning more than one infected 
> file in the archive: 
 
> $ clamscan --disable-archive --unzip Backdoor.Konik.06b.zip 
> Archive:  /home/tomek/vir/Backdoor.Konik.06b.zip 
>   inflating: info_trojan.txt 
>   inflating: klient_konik.exe 
>   inflating: config.exe 
>   inflating: winamp.exe 
>   inflating: Achates.html 
>   inflating: register.reg 
> /home/tomek/c995944d53c70058/info_trojan.txt: OK 
> /home/tomek/c995944d53c70058/klient_konik.exe: Trojan.Konik.06b-client 
> FOUND 
> /home/tomek/c995944d53c70058/config.exe: Trojan.Konik.06b-config FOUND 
> /home/tomek/c995944d53c70058/winamp.exe: Trojan.Konik.06b-server FOUND 
> /home/tomek/c995944d53c70058/Achates.html: OK 
> /home/tomek/c995944d53c70058/register.reg: OK 
> /home/tomek/vir/Backdoor.Konik.06b.zip: Infected Archive FOUND 
>  
> ----------- SCAN SUMMARY ----------- 
> Known viruses: 9902 
> Scanned directories: 1 
> Scanned files: 6 
> Infected files: 3 
>  
> (all files and viruses are reported). 
>  
 
Thanks, that's it ! Maybe with that option its not as fast as with 
built-in archive support - but that is what i'm searching for. 

-- 
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService

Jetzt kostenlos anmelden unter http://www.gmx.net

+++ GMX - die erste Adresse für Mail, Message, More! +++



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to