On Thu, 4 Dec 2003 05:58:46 -0500 (EST) jef moskot <[EMAIL PROTECTED]> wrote:
> I've heard of a new strategy for spreading viruses/worms. The victim > receives a message with an attached passworded zip file. The password ClamAV can handle such attacks as well - if an archive seems to be clear it also scans a raw archive file. Hence we can create a signature that matches the passworded file (as long as the virus is not able to re-zip the distributed archive with another password). Best regards, Tomasz Kojm -- oo ..... [EMAIL PROTECTED] www.ClamAV.net (\/)\......... http://www.clamav.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Thu Dec 4 15:04:13 CET 2003
pgp00000.pgp
Description: PGP signature