clamav and RAR..(update and feature request)

Martin Hepworth martinh at SOLID-STATE-LOGIC.COM
Mon Mar 7 09:29:27 GMT 2005


Is there anyway of running the ClamAV command-line with the --unrar
option set correctly if the new UNRAR option is set in MailScanner.conf?

An update for all those running Clam and following the RAR thread.

I caught two RAR viruses over the w/end, Sophos also picked them up. But
I am running clam with the wrapper modified to include the rar support
for the command line scanner...which may or may not have made a difference.

edit /opt/MailScanner/lib/clamav-wrapper and make sure the following is


Obviously you'll need to adjust paths where needed

Here's what I caught..

Report: ClamAV: 075466.rar contains Worm.Bagle.BA-RAR
         SophosSAVI: 075466.rar was infected by Troj/BagleDl-M

So make sure you're AV packages can handle RAR types. My ClamAV is 0.83
and my Sophos is 3.91.0.

Right off to try the 4.40.2 Julian put out over the w/end...

Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

<br />**********************************************************************
<br />
<br />This email and any files transmitted with it are confidential and
<br />intended solely for the use of the individual or entity to whom they
<br />are addressed. If you have received this email in error please notify
<br />the system manager.
<br />
<br />This footnote confirms that this email message has been swept
<br />for the presence of computer viruses and is believed to be clean.
<br />
<br />**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ ( and
the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list