OK - this seems to be a 'known issue'. A patch is here if other are having this problem:
http://blog.gmane.org/gmane.comp.security.virus.clamav.devel Does anyone know if/when this will be fixed in a stable release? Thanks, Chris --- Chris Masters <[EMAIL PROTECTED]> wrote: > Hi All, > > WinZip 9 256 bit AES encrypted zip files cause > errors > [tested against 0.85.1]. > > We're calling clam from MIMEDefang and the scan > returns an error. > > Other encrypted zip files scan OK. > > Is there any way round this as we have users wanting > to get these files through? > > Thanks, Chris > > LibClamAV debug: Loading databases from > /usr/local/clamav-0.85.1/share/clamav > LibClamAV debug: Loading > /usr/local/clamav-0.85.1/share/clamav/main.cvd > LibClamAV debug: in cli_cvdload() > LibClamAV debug: MD5(.tar.gz) = > 97483b1d8189548e820e8a3f4bef787b > LibClamAV debug: Decoded signature: > 97483b1d8189548e820e8a3f4bef787b > LibClamAV debug: Digital signature is correct. > LibClamAV debug: in cli_untgz() > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/COPYING > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/main.db > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/main.hdb > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/main.ndb > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/main.zmd > LibClamAV debug: Unpacking > /tmp/clamav-9ed9a4f6e5fc39f3/main.fp > LibClamAV debug: Loading databases from > /tmp/clamav-9ed9a4f6e5fc39f3 > LibClamAV debug: Loading > /tmp/clamav-9ed9a4f6e5fc39f3/main.db > LibClamAV debug: Initializing main node > LibClamAV debug: Initializing trie > LibClamAV debug: Initializing BM tables > LibClamAV debug: in cli_bm_init() > LibClamAV debug: BM: Number of indexes = 63744 > LibClamAV debug: Loading > /tmp/clamav-9ed9a4f6e5fc39f3/main.hdb > LibClamAV debug: Initializing md5 list structure > LibClamAV debug: Loading > /tmp/clamav-9ed9a4f6e5fc39f3/main.ndb > LibClamAV debug: Loading > /tmp/clamav-9ed9a4f6e5fc39f3/main.zmd > LibClamAV debug: Loading > /tmp/clamav-9ed9a4f6e5fc39f3/main.fp > LibClamAV debug: Loading > /usr/local/clamav-0.85.1/share/clamav/daily.cvd > LibClamAV debug: in cli_cvdload() > LibClamAV debug: MD5(.tar.gz) = > 42269589481f2dbe16f277ce58a5a080 > LibClamAV debug: Decoded signature: > 42269589481f2dbe16f277ce58a5a080 > LibClamAV debug: Digital signature is correct. > LibClamAV debug: in cli_untgz() > LibClamAV debug: Unpacking > /tmp/clamav-3181b9a816c26648/COPYING > LibClamAV debug: Unpacking > /tmp/clamav-3181b9a816c26648/daily.db > LibClamAV debug: Unpacking > /tmp/clamav-3181b9a816c26648/daily.hdb > LibClamAV debug: Unpacking > /tmp/clamav-3181b9a816c26648/daily.ndb > LibClamAV debug: Loading databases from > /tmp/clamav-3181b9a816c26648 > LibClamAV debug: Loading > /tmp/clamav-3181b9a816c26648/daily.db > LibClamAV debug: Loading > /tmp/clamav-3181b9a816c26648/daily.hdb > LibClamAV debug: Loading > /tmp/clamav-3181b9a816c26648/daily.ndb > LibClamAV debug: Recognized ZIP file > LibClamAV debug: in scanzip() > LibClamAV debug: Zip: A File.txt, crc32: 0x0, > encrypted: 1, compressed: 4921, normal: 43378, > method: > 99, ratio: 8 (max: 250) > LibClamAV debug: ZzipLib: Unsupported compression > mode > (99) > LibClamAV debug: Zip: Can't open file A File.txt > LibClamAV debug: Calculated MD5 checksum: > aa70e748d4c68d5a337cca261693bfea > problem.ZIP: Zip module failure > LibClamAV debug: Recognized ZIP file > LibClamAV debug: Calculated MD5 checksum: > aa70e748d4c68d5a337cca261693bfea > problem.ZIP: OK > > ----------- SCAN SUMMARY ----------- > Known viruses: 34399 > Engine version: 0.85.1 > Scanned directories: 0 > Scanned files: 1 > Infected files: 0 > Data scanned: 0.01 MB > Time: 0.804 sec (0 m 0 s) > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
