Dear List,
I forgot to add that, we still receive mails having PDF files as
attachments and they are password protected (like Bank statements
etc). Are such files really encrypted or they are just password
protected? If they are encrypted, how do we block such attachments
also?
Regards,
ANANT.
----- Message from [email protected] ---------
Date: Wed, 25 Nov 2009 08:41:45 +0530
From: ANANT S ATHAVALE <[email protected]>
Reply-To: ClamAV users ML <[email protected]>
Subject: Re: [Clamav-users] ArchiveBlockEncrypted.
To: [email protected]
Dear Bryan,
Thanks your inputs. We will take this into account and will tell
management about this.
Regards,
ANANT.
----- Message from [email protected] ---------
Date: Tue, 24 Nov 2009 09:28:29 -0500
From: Bryan Blackwell <[email protected]>
Reply-To: ClamAV users ML <[email protected]>
Subject: Re: [Clamav-users] ArchiveBlockEncrypted.
To: ClamAV users ML <[email protected]>
Greetings,
In general terms, I'd say if something can read an encrypted
archive without the password, then the encryption isn't very good.
More likely, ClamAV reads the file without decrypting and doesn't
find a pattern match, so it says it's ok - not the fault of the
software, I wouldn't expect otherwise. A better test would be to
take an AV test file, encrypt it, and run it through. I'll bet
ClamAV doesn't find it.
--Bryan
-- Bryan Blackwell --
Unix Systems Engineer
[email protected]
On Nov 24, 2009, at 12:28 AM, ANANT S ATHAVALE wrote:
I was just testing an encrypted file using clamscan. Though it
was password protected, it could scan and tell that it is not
infected with Virus. Then in that case, is it OK to allow
encrypted files?
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from [email protected] -----
Regards,
Anant Athavale.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from [email protected] -----
Regards,
Anant Athavale.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
