Dear Bryan,
Thanks your inputs. We will take this into account and will tell
management about this.
Regards,
ANANT.
----- Message from [email protected] ---------
Date: Tue, 24 Nov 2009 09:28:29 -0500
From: Bryan Blackwell <[email protected]>
Reply-To: ClamAV users ML <[email protected]>
Subject: Re: [Clamav-users] ArchiveBlockEncrypted.
To: ClamAV users ML <[email protected]>
Greetings,
In general terms, I'd say if something can read an encrypted archive
without the password, then the encryption isn't very good. More
likely, ClamAV reads the file without decrypting and doesn't find a
pattern match, so it says it's ok - not the fault of the software, I
wouldn't expect otherwise. A better test would be to take an AV
test file, encrypt it, and run it through. I'll bet ClamAV doesn't
find it.
--Bryan
-- Bryan Blackwell --
Unix Systems Engineer
[email protected]
On Nov 24, 2009, at 12:28 AM, ANANT S ATHAVALE wrote:
I was just testing an encrypted file using clamscan. Though it was
password protected, it could scan and tell that it is not infected
with Virus. Then in that case, is it OK to allow encrypted files?
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from [email protected] -----
Regards,
Anant Athavale.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
