Re: ClamaV et les PDFs

["JF Straeten" <jfstraeten@scarlet.be>]

Re,

On Fri, Dec 31, 2010 at 01:35:01PM +0100, Jean-Yves F. Barbier wrote:

[...]
> reteste avec une autre image pour voir s'il n'y aurait pas une interraction
> (Tpeu probable) et fait un report bug.

Tu as raison :

x=0 ; for file in *.pdf; do pdftk $file attach_files eicar.com output
out${x}.pdf; x=$((x+1)); done

testclamav:/tmp# clamscan 
/tmp/out7.pdf: OK
/tmp/out6.pdf: OK
/tmp/out5.pdf: OK
/tmp/out4.pdf: OK
/tmp/out3.pdf: OK
/tmp/out2.pdf: OK
/tmp/out1.pdf: OK
/tmp/out0.pdf: OK
/tmp/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 858216
Engine version: 0.96.5
Scanned directories: 1
Scanned files: 9
Infected files: 1
Data scanned: 1.11 MB
Data read: 0.69 MB (ratio 1.62:1)
Time: 4.740 sec (0 m 4 s)

testclamav:/tmp# clamscan --scan-pdf=yes
/tmp/out7.pdf: OK
/tmp/out6.pdf: OK
/tmp/out5.pdf: OK
/tmp/out4.pdf: OK
/tmp/out3.pdf: OK
/tmp/out2.pdf: OK
/tmp/out1.pdf: OK
/tmp/out0.pdf: OK
/tmp/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 858216
Engine version: 0.96.5
Scanned directories: 1
Scanned files: 9
Infected files: 1
Data scanned: 1.11 MB
Data read: 0.69 MB (ratio 1.62:1)
Time: 4.736 sec (0 m 4 s)


C'est inquiétant...

Bon, je vais faire un tour sur le site de Clamav.

Merci,

-- 

JFS.