[clamav-users] Scan of RAR problem

[jose-marcio martins da cruz]

On 04/29/2015 06:20 PM, René Bellora wrote:
> El 29/04/15 a las 13:04, jose-marcio martins da cruz escibió:
>>
>> Hello,
>>
>> I'm getting different results when scanning a infected email message.
>>
>> On a Sparc Solaris 10 (32 bits compiled), clamdscan tels me that the
>> message is infected : "Heuristics.Encrypted.RAR FOUND"
>>
>> Testing it on two 64 bits linux boxes (fedora and ubuntu), both tels
>> me that the message is clean.
>
>
>
> linux 32bits also report the message clean (with "ArchiveBlockEncrypted
> yes" in clamd.conf)

Hmmm...

On the Solaris boxes, there are libclamunrar* libraries, while there 
aren't at Linux boxes...

Clamav on Solaris boxes were compiled and installed from sources, while 
at Linux boxes they come from distros...

If I remember, there is a kind of licence problem with rar libraries...

Cheers,

José-Marcio


-- 

  Envoyé de ma machine à écrire.
  ---------------------------------------------------------------
   Spam : Classement statistique de messages électroniques -
          Une approche pragmatique
   Chez Amazon.fr : http://amzn.to/LEscRu ou http://bit.ly/SpamJM
  ---------------------------------------------------------------
  Jose Marcio MARTINS DA CRUZ            http://www.j-chkmail.org
  Ecole des Mines de Paris                   http://bit.ly/SpamJM
  60, bd Saint Michel                      75272 - PARIS CEDEX 06