[clamav-users] ClamAV does not detect viruses in "ar archive" file format

info at schroeffu.ch info at schroeffu.ch
Fri Jul 8 14:10:03 UTC 2022


Hey clamav users, 

I am trying to scan "ar archive" format like .deb packages are. ClamAV
unfortunately does not detect the eicar inside the ar archive. 

Do I miss something to configure so clamav scans/unpacks "ar archive"
formats correctly?

##Virus not found
##clam(d)scan does not detect any virus in ar archive file type
root at vmdxyz:/tmp# clamdscan testvirus.deb
/tmp/gimp/gimp2/gimp3/testvirus.deb: OK 

Informations: 

## ar file type
root at vmdxyz:/tmp# file testvirus.deb 
testvirus.deb: current ar archive 

#ar file list with eicar.txt inside
root at vmdxyz:/tmp# ar t testvirus.deb 
eicar.txt
debian-binary 

#for comparison: .tar.gz eicar inside is detected
root at vmdxyz:/tmp# clamdscan eicar.txt.tar.gz
/tmp/eicar.txt.tar.gz: Eicar-Signature FOUND

Thanky for any help to detect viruses in "ar archive" formats with
clamav :-o :-) 

All the best
Schroeffu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220708/fda6b351/attachment.htm>


More information about the clamav-users mailing list