【问题标题】:ClamAV clamscan not scanning for infected files present inside an archived fileClamAV clamscan 不扫描存档文件中存在的受感染文件
【发布时间】:2022-08-19 01:55:31
【问题描述】:

我正在测试 ClamAV 以检测机器上的病毒。

我在跑步 clamscan -r -i \"Path to folder containing archive that has infected file\"

它无法检测到存档文件中存在的受感染文件。 如果我在 zip 之外有受感染的文件,它正在检测该文件。

我在 scan-archive 设置为 yes 的扫描仪文件夹中创建了 clamd.conf / clamav.conf。

    标签: windows clamav clam


    【解决方案1】:

    您的 zip 文件可能大于默认值。 添加这些选项以及运行扫描。

    --max-filesize=#n
    Extract and scan at most #n bytes from each archive. You may pass the value in kilobytes in format xK or xk, or megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 25 MB, max: <4 GB)
    
    --max-scansize=#n
    Extract and scan at most #n bytes from each archive. The size the archive plus the sum of the sizes of all files within archive count toward the scan size. For example, a 1M uncompressed archive containing a single 1M inner file counts as 2M toward max-scansize. You may pass the value in kilobytes in format xK or xk, or megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: <4 GB)
    
    --max-files=#n
    Extract at most #n files from each scanned file (when this is an archive, a document or another kind of container). This option protects your system against DoS attacks (default: 10000)
    
    

    参考:https://manpages.ubuntu.com/manpages/xenial/man1/clamscan.1.html

    【讨论】:

      猜你喜欢
      • 1970-01-01
      • 2012-07-22
      • 1970-01-01
      • 2018-09-20
      • 2022-01-08
      • 1970-01-01
      • 2012-03-15
      • 1970-01-01
      • 2012-08-10
      相关资源
      最近更新 更多