unable to interpret .rar extension

[Sawapandeep]

am currently working a on a project where am running ClamAV daemon with NodeJs server , to make a virus scannign local api, was scannig "eicar" test file and the response was virus name(Good 👍), but when i compressed the test file , then scanned the archive it came out to be clean , i don't know why this is happening

[micahsnyder]

@Sawapandeep you deleted the issue template rather then filling out the necessary details. The output from clamconf -n in particular will help triage what is going wrong.

My suspicion is that you installed clamav from a package such as Debian's that separates out the RAR module because of licensing concerns. If true, you need to install the clamunrar package. On Debian it's called libclamunrar9. See: https://docs.clamav.net/manual/Installing/Packages.html#debian

For debian note the instructions about adding "non-free" to /etc/apt/sources.list.