Hi, I received a RAR file (orderlist.rar) which contained an EXE (orderlist.exe). The EXE was detected by clamscan when scanned separately, but the EXE within the RAR was not. Is there a problem with my configuration that would cause this?
Here is my clamd.conf (which is really /etc/clamd.d/amavisd.conf), although I don't know if clamscan uses this when scanning from the command-line? LogFile /var/log/clamav/clamd.log LogFileMaxSize 20M LogTime yes LogSyslog yes LogFacility LOG_MAIL LogVerbose yes PidFile /var/run/clamd.amavisd/clamd.pid TemporaryDirectory /var/tmp DatabaseDirectory /var/lib/clamav LocalSocket /var/run/clamd.amavisd/clamd.sock TCPSocket 3310 TCPAddr 127.0.0.1 MaxThreads 10 ReadTimeout 160 User amavis AllowSupplementaryGroups yes DetectPUA yes MaxScanSize 50M MaxFileSize 8M MaxRecursion 10 MaxFiles 2000 Thanks, Alex _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
