I took the eicar test virus and compressed using 7z, bz2, gzip, zip, tar.gz and rar. All but 7zip archive was detected. ClamWin(netfarm) on the other hand detects all the files, and is running 0.94 on my M$ host. The last version I had of clamav did scan lzma... and it looks like configure create the make files and I see no errors there. The Eicar test virus makes it easy to reproduce. I've tested 0.94.1 stable and RC1 on Fedora 8 and CentOS both and no matter what virus or malware I compress or store in 7zip, and no matter what OS I use to create the archive, the linux 7z detection does not function as it did in the previous version we used (we don't know which one that was though...)
I ran debug and I don't see lzma (7zip) listed: LibClamAV debug: Module ARCHIVE: On LibClamAV debug: * Submodule RAR: On LibClamAV debug: * Submodule ZIP: On LibClamAV debug: * Submodule GZIP: On LibClamAV debug: * Submodule BZIP: On LibClamAV debug: * Submodule ARJ: On LibClamAV debug: * Submodule SZDD: On LibClamAV debug: * Submodule CAB: On LibClamAV debug: * Submodule CHM: On LibClamAV debug: * Submodule OLE2: On LibClamAV debug: * Submodule TAR: On LibClamAV debug: * Submodule BINHEX: On LibClamAV debug: * Submodule SIS: On LibClamAV debug: * Submodule NSIS: On LibClamAV debug: * Submodule AUTOIT: On Is 7z not supported any longer or could I not have installed it correctly? I ran ldconfig and I've installed everything I could think of. Thanks! -Andy- -Xinn.org- Security, and Sanity Solutions The makers of ClearSite NMS. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
