Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.27k stars 692 forks source link

unable to interpret .rar extension #1234

Open Sawapandeep opened 5 months ago

Sawapandeep commented 5 months ago

am currently working a on a project where am running ClamAV daemon with NodeJs server , to make a virus scannign local api, was scannig "eicar" test file and the response was virus name(Good 👍), but when i compressed the test file , then scanned the archive it came out to be clean , i don't know why this is happening Screenshot 2024-04-13 162640

micahsnyder commented 5 months ago

@Sawapandeep you deleted the issue template rather then filling out the necessary details. The output from clamconf -n in particular will help triage what is going wrong.

My suspicion is that you installed clamav from a package such as Debian's that separates out the RAR module because of licensing concerns. If true, you need to install the clamunrar package. On Debian it's called libclamunrar9. See: https://docs.clamav.net/manual/Installing/Packages.html#debian

For debian note the instructions about adding "non-free" to /etc/apt/sources.list.