That should do it. It looks like I'm running 0.6 I'll get that upgraded right now and retest.
Thanks,
-Russell
Cedric Foll wrote:
Which version of clamav you use ? With 0.65 it works fine. If the zip is corrupted it will says: 'Seriously Broken Zip FOUND'
Le ven 12/12/2003 à 17:23, Russell J. Lahti a écrit :
I've run into the following situation:
When an email comes in that is infected with Worm.Mimail.G, clamscan isn't catching it, so I did some manual testing:
Scan of the zip file: ------------------------------------------------------------ clamscan readnow.zip readnow.zip: OK ------------------------------------------------------------ Responds that the zip file is fine.
Unzip the zip file: ------------------------------------------------------------ unzip readnow.zip Archive: readnow.zip warning [readnow.zip]: 3 extra bytes at beginning or within zipfile (attempting to process anyway) file #1: bad zipfile offset (local header sig): 3 (attempting to re-compensate) extracting: readnow.doc.scr ----------------------------------------------------------- Strange zip file.. but unzip handled it.
Scan the extracted file: ------------------------------------------------------------ clamscan readnow.doc.scr readnow.doc.scr: Worm.Mimail.G FOUND ------------------------------------------------------------ Clamscan finds the contents to be a virus.
Anyone have any suggestions / fixes for this behavior?.. Clamscan has been great at catching everything else.
-Russell
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
