[clamav-users] Finding infections in a tar-ball

[Dennis Peterson]

On 4/11/14, 1:31 AM, Mischa Coenen wrote:
> Hi,
>
>   
>
> Clamscan can scan the contents of tar-balls for virusses, when I tar only a eicar-file than clamav detects it. But I did a test in which i have put an eicar file in different directories including the top-directory, clamscan cannot detect any of the eicar files. I'm using ClamAV 0.98.1.
>
> Anybody advice what could be the issue?
>
> Regards
> Mischa
>   		 	   		
>
I see this only when the tar file exceeds --max-scansize or --max-filesize. If 
this the the case you should also see errors if you are running this from a 
command line. If you are using any kind of wrapper that hides the error text 
then you will see nothing.

dp