AW: Error with RAR-Files

[Marcel Blenkers]

Hi there,

>
> was the packed created with a newer version of rar ?
> unrar 3.00 isnt that new and winrar >3.20 uses newer
> algorithm (as far as i know :))
> can u manual decompress the archive with unrar ?
>

the File was sent via heise.de, as they provide the test for various
infected mails.

I tested the eicar.rar-file, detached it, and..yes i was able to
uncompress it with the unrar-command on the shell :(

Then i tried clamscan on the decompressed eicar.com-file, which resulted
with the eicar-test-file.
Then i tried the clamscan-command and actived option for scan of rar-files
within the clam.conf..there i just got an error..

Greetings

Marcel

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html