On Wed, 12 Nov 2003, Serge Sivkov wrote:
> Archive:  photos.zip

I've just gone through the same thing.  If you run clamscan on the file
directly from the command line, you'll probably see that it detects the
virus appropriately.

The "problem" appears to be in the Archive::Zip perl module, which can't
properly unpack the malformed zip files used by the Mimail.* worm.  You
could say that this isn't really a problem with the perl module, because
these zip files are incorrectly formed, and you could argue that anything
that actually unzips them is "broken".

Regardless of the politics, the issue is that the zip files are unzippable
by Windows machines, so they need to be stopped.

I solved the problem by configuring my mailscanner (amavis) to use an
external unzipper, instead of the perl module.  The trick seems to be to
cut Archive::Zip out of the loop, at least until it is "fixed".

Jeffrey Moskot
System Administrator
[EMAIL PROTECTED]


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to