Are there any plans to add upx and other executable packers
support to Clamav? I recently got Worm.Gibe.F, of which .exe was not
detected as virus and since exiscan didn't pass message body to
antivirus was not recognised as virus. In last virus definitions
update it was mentioned, that it was corrupted executable and in this
case all is fine. But the virus was compressed with upx - when i
uncompressed it, it was recognised as virus, when I recompressed it
again, it was not recognised... And checking virus db for Gibe I
noticed, that there are special definition for upx compressed virus -
they probably would not be necessary if clamav could do 
unpacking... Unfortunately I don't know c well enough to try do
something about it:(

-- 
Virgo Pärna 
[EMAIL PROTECTED]



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to