[clamav-users] unexplainable tar behaviour

[Tilman Schmidt]

Am 30.10.19 um 03:34 schrieb Paul Kosinski via clamav-users:
> I thought ClamAV unpacked TARs (and other archives) and looked at the
> contents. If it doesn't, it wouldn't be very effective in detecting
> viruses in compressed files.

Yes it does, but IIUC it matches signatures not only to the extracted
files but also to the raw archive in order to catch malware exploiting
vulnerabilities in archive unpackers.