> From: Ed Phillips [mailto:[EMAIL PROTECTED] > On Thu, 4 Mar 2004, Igor Brezac wrote: > > On Thu, 4 Mar 2004, Tomasz Kojm wrote: > > > Hello, > > > > > > due to many requests ClamAV is now able to detect and mark password > > > protected archives as a virus type "Encrypted.Zip" (big thanks to > > > Michael L Torrie). You have to enable this feature manually with > > > ArchiveDetectEncrypted in clamav.conf and --detect-encrypted in > > > clamscan. Please be careful and WARN YOUR USERS before enabling it. > I think it was mentioned that the virus is encrypted in ZIP > format with a > randomized password as it is being propagated.
Is it possible to create Encrypted.Tar, Encrypted.Sit, Encrypted.(etc...)? The built-in Zip-decompresser in XP supports all kinds of formats besides .ZIP, so I worry about copycat viruses simply switching compression engines. Matthew van Eerde Software Engineer Hispanic Business Inc. HireDiversity.com 805.964.4554 x902 [EMAIL PROTECTED] http://www.hispanicbusiness.com http://www.hirediversity.com ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users