On 29.10.19 15:10, Alan Stern wrote:
> Try bisection...

That makes things even more confusing.

I have shared the tar twice with different ratios. But the individual parts are 
all reported as clean.

# split -b 80M all.tar all
# ll
total 445768
-rw-r--r--  1 root root  83886080 30. Okt 07:57 allaa
-rw-r--r--  1 root root  80998400 30. Okt 07:57 allab
-rw-r--r--  1 root root 164884480 29. Okt 08:00 all.tar
# clamdscan  -v --fdpass all*
/root/clamcheck/allaa: OK
/root/clamcheck/allab: OK
/root/clamcheck/all.tar: Java.Trojan.Agent-36975 FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 40.302 sec (0 m 40 s)

# split -b 77M all.tar all
# ll
total 445768
-rw-r--r--  1 root root  80740352 30. Okt 08:15 allaa
-rw-r--r--  1 root root  80740352 30. Okt 08:15 allab
-rw-r--r--  1 root root   3403776 30. Okt 08:15 allac
-rw-r--r--  1 root root 164884480 29. Okt 08:00 all.tar
# clamdscan  -v --fdpass all*
/root/clamcheck/allaa: OK
/root/clamcheck/allab: OK
/root/clamcheck/allac: OK
/root/clamcheck/all.tar: Java.Trojan.Agent-36975 FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 41.426 sec (0 m 41 s)

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to