[clamav-users] ClamXav and Compressed Files

Dennis Peterson dennispe at inetnw.com
Sun Mar 29 07:18:20 EDT 2015


On 3/29/15 12:08 AM, Al Varnell wrote:
> On Sat, Mar 28, 2015 at 09:50 PM, Dennis Peterson wrote:
>> It should be possible to use cpio to extract the contents to a stream and feed that into the ClamAV engine
> OS X does include cpio but I have been unsuccessful in getting it to do anything with a .dmg.  cpio -h tells me it’s "bsdcpio 2.8.3 -- lib archive 2.8.3”, but I also see evidence that it’s already included from clamav-0.98.6 source’s libclamav directory.  I suspect that means it’s what is used to extract "tar, pax, cpio , zip, jar, ar, and ISO 9660 cdrom images" (from the man).
>
> I think we’re going to have to wait for somebody to tell us exactly how “Dmg scanning was added."
>
>
> -Al-
That's because I'm an idiot. I meant dd, not cpio. But that won't work either 
because clamscan can't read raw partitions. Or if it does I haven't figured it 
out. This was also hashed out last year at 
http://lurker.clamav.net/message/20140210.230519.1b53a3a9.en.html

dp



More information about the clamav-users mailing list