Sophos Anti-Virus for Linux with archive RAR 5.0 file

Hello Thanadon Somdee,

interesting question. I assume you mean scan inside, don't you? Do you ask specifically about 5.0 because you have the impression it doesn't.
Don't have my Linux with me right now, a test on Windows (scanning engines should be the same) suggests it doesn't. Perhaps DouglasLeeder  can answer engine questions too.

Christian

Since I try to scan file virus.pdf.r23 but it is not detected but then I unrar the file and scan again it detected as Mal/MSIL-TC

I'm afraid I don't know if the engine supports unpacking RARv5

If it does sweep will require a -archive option to unpack archives.

-archive option was added but not detected virus inside RAR

Hello Thanadon Somdee,

it's not the switch (whether -archive or -rar), 4.x rar-archives are unrared and the contents scanned, for whatever reason the scanner doesn't do this for 5.x.
Please note that his is more an inconvenience - real-time scanning will detect threats when the archive is unpacked. If you use sweep/savscan for e.g. uploads you'd have to unpack yourself and request a scan of the temporary directory.

Christian