Hey clamav users,

I am trying to scan "ar archive" format like .deb packages are. ClamAV unfortunately does not detect the eicar inside the ar archive.

Do I miss something to configure so clamav scans/unpacks "ar archive" formats correctly?

##Virus not found
##clam(d)scan does not detect any virus in ar archive file type
root@vmdxyz:/tmp# clamdscan testvirus.deb
/tmp/gimp/gimp2/gimp3/testvirus.deb: OK


Informations:

## ar file type
root@vmdxyz:/tmp# file testvirus.deb
testvirus.deb: current ar archive

#ar file list with eicar.txt inside
root@vmdxyz:/tmp# ar t testvirus.deb
eicar.txt
debian-binary

#for comparison: .tar.gz eicar inside is detected
root@vmdxyz:/tmp# clamdscan eicar.txt.tar.gz
/tmp/eicar.txt.tar.gz: Eicar-Signature FOUND

Thanky for any help to detect viruses in "ar archive" formats with clamav :-o :-)

All the best
Schroeffu