> From: Ed Phillips [mailto:[EMAIL PROTECTED]
> On Thu, 4 Mar 2004, Igor Brezac wrote:
> > On Thu, 4 Mar 2004, Tomasz Kojm wrote:
> > > Hello,
> > >
> > > due to many requests ClamAV is now able to detect and mark password
> > > protected archives as a virus type "Encrypted.Zip" (big thanks to
> > > Michael L Torrie). You have to enable this feature manually with
> > > ArchiveDetectEncrypted in clamav.conf and --detect-encrypted in
> > > clamscan. Please be careful and WARN YOUR USERS before enabling it.
> I think it was mentioned that the virus is encrypted in ZIP 
> format with a
> randomized password as it is being propagated.

Is it possible to create Encrypted.Tar, Encrypted.Sit, Encrypted.(etc...)?
The built-in Zip-decompresser in XP supports all kinds of formats besides
.ZIP, so I worry about copycat viruses simply switching compression engines.

Matthew van Eerde
Software Engineer
Hispanic Business Inc.
HireDiversity.com
805.964.4554 x902
[EMAIL PROTECTED]
http://www.hispanicbusiness.com
http://www.hirediversity.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to