Hi All, WinZip 9 256 bit AES encrypted zip files cause errors [tested against 0.85.1].
We're calling clam from MIMEDefang and the scan returns an error. Other encrypted zip files scan OK. Is there any way round this as we have users wanting to get these files through? Thanks, Chris LibClamAV debug: Loading databases from /usr/local/clamav-0.85.1/share/clamav LibClamAV debug: Loading /usr/local/clamav-0.85.1/share/clamav/main.cvd LibClamAV debug: in cli_cvdload() LibClamAV debug: MD5(.tar.gz) = 97483b1d8189548e820e8a3f4bef787b LibClamAV debug: Decoded signature: 97483b1d8189548e820e8a3f4bef787b LibClamAV debug: Digital signature is correct. LibClamAV debug: in cli_untgz() LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/COPYING LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/main.db LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/main.hdb LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/main.ndb LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/main.zmd LibClamAV debug: Unpacking /tmp/clamav-9ed9a4f6e5fc39f3/main.fp LibClamAV debug: Loading databases from /tmp/clamav-9ed9a4f6e5fc39f3 LibClamAV debug: Loading /tmp/clamav-9ed9a4f6e5fc39f3/main.db LibClamAV debug: Initializing main node LibClamAV debug: Initializing trie LibClamAV debug: Initializing BM tables LibClamAV debug: in cli_bm_init() LibClamAV debug: BM: Number of indexes = 63744 LibClamAV debug: Loading /tmp/clamav-9ed9a4f6e5fc39f3/main.hdb LibClamAV debug: Initializing md5 list structure LibClamAV debug: Loading /tmp/clamav-9ed9a4f6e5fc39f3/main.ndb LibClamAV debug: Loading /tmp/clamav-9ed9a4f6e5fc39f3/main.zmd LibClamAV debug: Loading /tmp/clamav-9ed9a4f6e5fc39f3/main.fp LibClamAV debug: Loading /usr/local/clamav-0.85.1/share/clamav/daily.cvd LibClamAV debug: in cli_cvdload() LibClamAV debug: MD5(.tar.gz) = 42269589481f2dbe16f277ce58a5a080 LibClamAV debug: Decoded signature: 42269589481f2dbe16f277ce58a5a080 LibClamAV debug: Digital signature is correct. LibClamAV debug: in cli_untgz() LibClamAV debug: Unpacking /tmp/clamav-3181b9a816c26648/COPYING LibClamAV debug: Unpacking /tmp/clamav-3181b9a816c26648/daily.db LibClamAV debug: Unpacking /tmp/clamav-3181b9a816c26648/daily.hdb LibClamAV debug: Unpacking /tmp/clamav-3181b9a816c26648/daily.ndb LibClamAV debug: Loading databases from /tmp/clamav-3181b9a816c26648 LibClamAV debug: Loading /tmp/clamav-3181b9a816c26648/daily.db LibClamAV debug: Loading /tmp/clamav-3181b9a816c26648/daily.hdb LibClamAV debug: Loading /tmp/clamav-3181b9a816c26648/daily.ndb LibClamAV debug: Recognized ZIP file LibClamAV debug: in scanzip() LibClamAV debug: Zip: A File.txt, crc32: 0x0, encrypted: 1, compressed: 4921, normal: 43378, method: 99, ratio: 8 (max: 250) LibClamAV debug: ZzipLib: Unsupported compression mode (99) LibClamAV debug: Zip: Can't open file A File.txt LibClamAV debug: Calculated MD5 checksum: aa70e748d4c68d5a337cca261693bfea problem.ZIP: Zip module failure LibClamAV debug: Recognized ZIP file LibClamAV debug: Calculated MD5 checksum: aa70e748d4c68d5a337cca261693bfea problem.ZIP: OK ----------- SCAN SUMMARY ----------- Known viruses: 34399 Engine version: 0.85.1 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.01 MB Time: 0.804 sec (0 m 0 s) __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
