Certainly agree that many, many disk images are known to contain malware, but the usual approach there is to use a hash value for the file as there are other issues with attempting to scan within the image without mounting it first. The most recent versions of ClamXav now does both a hash check and scans after mounting.
-Al- On Thu, Aug 04, 2016 at 07:32 PM, Paul Kosinski wrote: > > Disk images often contain whole file systems and thus many, many files. > The alternative is to scan the entire FS after it is "mounted". (Of > course disk images these days might be 6 TB rather than a mere 6 GB.)
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml