On Wednesday 28 July 2004 9:33 pm, Bruno Lellis wrote:

> Hello,
> I've read some emails that says that clamav scan file with password for a
> long time. But I put a password in eicar zip and test with 'clamscan
> eicar.zip' and clamav does not detect virus, only if no password-protected
> zip is detected!

The emails you have seen saying that ClamAV can detect password-encrypted 
zipped viruses are correct, but only for viruses which are known to be 
distributed in the wild by means of password encrypted zip files.

This does not mean that ClamAV can detect *any* virus which has been placed in 
a password encrypted zip file (such as your test).

Therefore, if a password-encrypted zip file is the "normal" form of a virus, 
it's very likely that ClamAV will detect it.

If a password-encrypted zip file is not the normal form of a virus, it's very 
unlikely that ClamAV will detect it.

Regards,

Antony.

-- 
The difference between theory and practice is that in theory there is no 
difference, whereas in practice there is.

                                                     Please reply to the list;
                                                           please don't CC me.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to