On some mail attachments Clamav(0.80) reports Oversized.Zip, but the compression ratio of this attachment is good
For example:
In raw mail message
------
Content-Type: application/msword;
name="Vane2 OFF-design without mesh.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Vane2 OFF-design without mesh.doc"
------
After saving this file to mesh.doc:
----
file /tmp/mesh.doc /tmp/mesh.doc: Zip archive data, at least v2.0 to extract
----
unzip -lv /tmp/mesh.doc Archive: /tmp/mesh.doc
Length Method Size Ratio Date Time CRC-32 Name
-------- ------ ------- ----- ---- ---- ------ ----
2028 Defl:N 518 75% 12-27-04 15:28 3e3c312f file_name
874796 Defl:N 151104 83% 04-09-04 13:53 f9d40334 file_name
874796 Defl:N 330883 62% 09-10-04 10:13 59aca306 file_name
874790 Defl:N 330285 62% 12-27-04 14:01 138c1dcc file_name
289352 Defl:N 239515 17% 12-27-04 14:01 4b632d4a file_name
1002 Defl:N 440 56% 09-10-04 10:15 2f4702d6 file_name
713135 Defl:N 236270 67% 06-09-04 15:48 9ad21627 file_name
30709 Defl:N 547 98% 06-09-04 15:48 b31f2ac0 file_name
2029 Defl:N 513 75% 12-27-04 13:22 d0728aef file_name
2026 Defl:N 519 74% 12-28-04 09:17 b1bf3090 file_name
2028 Defl:N 522 74% 12-27-04 14:25 f89a3d3d file_name
2027 Defl:N 517 75% 12-28-04 11:11 3283f0e5 file_name
2029 Defl:N 523 74% 12-28-04 10:15 df2fc079 file_name
437396 Defl:N 2157 100% 06-09-04 15:48 698268c4 file_name
1722670 Defl:N 303170 82% 05-11-01 16:54 0453936e file_name
953 Defl:N 526 45% 09-07-04 10:34 ec571065 file_name
437396 Defl:N 5520 99% 06-09-04 15:48 237ad7c6 file_name
1085519 Defl:N 407561 63% 12-08-04 16:46 42955402 file_name
512784 Defl:N 156690 69% 05-11-01 16:52 5c2b0168 file_name
179488 Defl:N 42567 76% 06-09-04 15:48 fde5d6f6 file_name
-------- ------- --- -------
8046953 2210347 73% 20 files
Nothing strange about compression ratio ... In clamd.conf: ArchiveMaxCompressionRatio 300 .
thanks in advance
--
Best regards,
Maxim Cherniavsky
Comstar-UTS, Internet Division
mailto: maxim (at) comstar.ru
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
