Weird! Clamav Antivirus
Posted by Planet Malaysia on July 6, 2006
I was using Clamav Antivirus for some times/years for my email server, desktop, file server, and etc.
Today I found a weird problem on my [tag]clamav[/tag] [tag]antivirus[/tag] [tag]server[/tag].
I have a zip file said ‘abc.zip’ which contain a password protected.
[user1@planetmy user1]# clamdscan abc.zip
/home/user1/abc.zip: Encrypted.Zip FOUND———– SCAN SUMMARY ———–
Infected files: 1
Time: 0.906 sec (0 m 0 s)[user1@planetmy user1]# clamscan abc.zip
abc.zip: OK———– SCAN SUMMARY ———–
Known viruses: 60859
Engine version: 0.88.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2.32 MB
Time: 2.938 sec (0 m 2 s)
WTH? Which one is accurate/correct?
After google for a while a found the solution.
$vi /etc/clamd.conf
(insert “#” infront of ArchiveBlockEncrypted)
Restart ClamAV Services
$/etc/init.d/clamd restart
[user1@planetmy user1]# clamdscan abc.zip
/home/user1/abc.zip: OK———– SCAN SUMMARY ———–
Infected files: 0
Time: 0.906 sec (0 m 0 s)[user1@planetmy user1]# clamscan abc.zip
abc.zip: OK———– SCAN SUMMARY ———–
Known viruses: 60859
Engine version: 0.88.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2.32 MB
Time: 2.938 sec (0 m 2 s)
I did tried send to my [tag]Gmail[/tag] and [tag]Yahoo[/tag] mail account but only Yahoo accept that ‘abc.zip’ attachment email and Gmail detected as [tag]virus[/tag] [tag]mail[/tag].
Hmm, can anyone tell me is Google Mail used clamdscan as well?
Possibly Related Posts:
- Streamyx Speed Test
- TMNET Unifi Really Fast?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Leklai
Comments
4 Responses to “Weird! Clamav Antivirus”
Leave a Reply
“/home/user1/abc.zip: Encrypted.Zip FOUND”
It doesn’t say virus, it just rejects because it can’t check inside the zip, Gmail is using a similar system as it scans recursively inside compressed files.
Say if you try and send an .exe inside a .zip it will reject.
how do I join so that my posts gets updated here?
Can you goto Planet Malaysia main page – http://www.planetmy.com and click “Join Us” at top right corner? TQ
Because the ClamAV cant scan inside the .Zip files, such as like compression files, so it will infected, but no virus listed !