Error with RAR-Files

[Marcel Blenkers]

Hi there,

i just tested to send me an Eicar-File within a rar-file.

Then i saw the following lines within the mail-log:

Aug  5 15:05:49 marcel MailScanner[14237]: Virus and Content Scanning:
Starting
Aug  5 15:05:50 marcel MailScanner[14237]:
/var/spool/MailScanner/incoming/14237
/./i75D5bZD014309/eicar.rar: RAR module failure
Aug  5 15:05:50 marcel MailScanner[14237]: ProcessClamAVOutput:
unrecognised lin
e "/var/spool/MailScanner/incoming/14237/./i75D5bZD014309/eicar.rar: RAR
module
failure". Please contact the authors!
Aug  5 15:05:50 marcel MailScanner[14237]:
/tmp/clamav.14318/clamav-d97a4c0e3852
2ad2/eicar.rar: RAR module failure
Aug  5 15:05:50 marcel MailScanner[14237]: ProcessClamAVOutput:
unrecognised lin
e "/tmp/clamav.14318/clamav-d97a4c0e38522ad2/eicar.rar: RAR module
failure". Ple
ase contact the authors!
Aug  5 15:05:50 marcel MailScanner[14237]: UNRAR 3.00 freeware
Copyright (c
) 1993-2002 Eugene Roshal
Aug  5 15:05:50 marcel MailScanner[14237]: ProcessClamAVOutput:
unrecognised lin
e "UNRAR 3.00 freeware      Copyright (c) 1993-2002 Eugene Roshal". Please
conta
ct the authors!
Aug  5 15:05:50 marcel MailScanner[14237]: Extracting from
/tmp/clamav.14318/cla
mav-d97a4c0e38522ad2/eicar.rar
Aug  5 15:05:50 marcel MailScanner[14237]: ProcessClamAVOutput:
unrecognised lin
e "Extracting from /tmp/clamav.14318/clamav-d97a4c0e38522ad2/eicar.rar".
Please
contact the authors!
Aug  5 15:05:50 marcel MailScanner[14237]: Extracting  eicar.com
                                    ^H^H^H^H 65%^H^H^H^H^H  OK
Aug  5 15:05:50 marcel MailScanner[14237]: ProcessClamAVOutput:
unrecognised lin
e "Extracting  eicar.com
^H^H
^H^H 65%^H^H^H^H^H  OK ". Please contact the authors!
Aug  5 15:05:50 marcel MailScanner[14237]:
/tmp/clamav.14318/clamav-b2a097e89b44
7d3a/eicar.com: Eicar-Test-Signature FOUND



Has anyone an idea what happened now?
As in the past the unrar-Test worked just fine.

Greetings Marcel

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html