I'm having a problem where clamscan does not detect an encrypted .zip
file, but clamdscan does.  Does anyone have any suggestions?

[EMAIL PROTECTED] tmp]# /usr/bin/clamdscan --tempdir=/tmp -r -i bob.zip
/tmp/bob.zip: Encrypted.Zip FOUND
----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.002 sec (0 m 0 s)

[EMAIL PROTECTED] tmp]# /usr/bin/clamscan --tempdir=/tmp -r -i bob.zip
----------- SCAN SUMMARY -----------
Known viruses: 21192
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
I/O buffer size: 131072 bytes
Time: 3.306 sec (0 m 3 s)

[EMAIL PROTECTED] tmp]# clamscan --version
clamscan / ClamAV version 0.70

[EMAIL PROTECTED] tmp]# clamdscan --version
clamdscan / ClamAV version 0.70

[EMAIL PROTECTED] tmp]# grep Encr /etc/clam*.conf
/etc/clamav.conf:# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).
/etc/clamav.conf:ArchiveBlockEncrypted
/etc/clamd.conf:# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).
/etc/clamd.conf:ArchiveBlockEncrypted

[EMAIL PROTECTED] tmp]# grep Stream /etc/clam*.conf
/etc/clamav.conf:StreamSaveToDisk
/etc/clamav.conf:StreamMaxLength 16M
/etc/clamd.conf:StreamSaveToDisk
/etc/clamd.conf:StreamMaxLength 16M

[EMAIL PROTECTED] tmp]# grep User /etc/clam*.conf
/etc/clamav.conf:User root
/etc/clamd.conf:User root

[EMAIL PROTECTED] tmp]# find / -name "clam*.conf" -print
/etc/clamav.conf
/etc/clamd.conf

[EMAIL PROTECTED] tmp]# whereis clamscan
clamscan: /usr/bin/clamscan /usr/share/man/man1/clamscan.1.bz2

[EMAIL PROTECTED] tmp]# whereis clamdscan
clamdscan: /usr/bin/clamdscan /usr/share/man/man1/clamdscan.1.bz2
[EMAIL PROTECTED] tmp]#

-- 
          Eric Wieling * BTEL Consulting * 504-899-1387 x2111
"In a related story, the IRS has recently ruled that the cost of Windows
upgrades can NOT be deducted as a gambling loss."



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to