Hello!

I have Debian 9.7 w/ postfix and ClamAV 0.100.2  I have made custom definition file /var/lib/clamav/archive_exe.cdb containing:
Archived_EXE:*:*:.*\.exe:*:*:*:*:*:*
So that every archive packed with exe would be treated as a virus. This works with .zip files and .7zip files but not with .rar files. I installed unrar package and libclamunrar9, restarted daemons and the system but still .rar files containing exe are let through. I read that at some point unrar code was removed from ClamAV and now it only supports rar versions 1-2 but not 3. How to work around this? Someone suggested using --unrar option, but where do I put it? Conf file syntax doesn't seem to support this.

Thanks
BR,
Janis.


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to