Clamscan and RAR failures

[Rick Cooper]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Gib Gilbertson Jr.
> Sent: Tuesday, August 24, 2004 8:28 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Clamscan and RAR failures
>
>
> Hi Julian.
>
> It's passing the viruses on through and delivering them.
>
> gib


is the .rar. password protected? and Have you checked using clamav rather
than the module? The module doesn't use unrar



>
> At 01:45 PM 8/24/2004 +0100, you wrote:
> >At 13:02 24/08/2004, you wrote:
> >>Hi All.
> >>
> >>FreeBSD 4.10
> >>Perl 5.8.2
> >>MailScanner 4.32.4
> >>clamscan / ClamAV version 0.72
> >>
> >>I am getting the following error when running tests from the
> heise.de site
> >>on RAR files.
> >>
> >>ClamAVModule::ERROR:: RAR module failure.:: ./i7OBkkhH019323/eicar.rar
> >>
> >>I've read through the archives, applied the patch to SweepVirus.pm as
> >>mentioned in e-mails from Julian on Fri, 13 Aug. I've restarted
> MailScanner
> >>and had the eicar.rar file resent from heise.de and get the same error.
> >
> >But is it detecting the viruses in them?
> >--
> >Julian Field
> >www.MailScanner.info
> >MailScanner thanks transtec Computers for their support
> >
> >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>
> --
>
>       Gib Gilbertson Jr.
>      Tierramiga Info Systems
>       619-287-8647 Support
>       http://www.tmisnet.com
>       San Diego's "Friendly ISP"
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).