ramya wrote:
Hii,
this is just for my information..
How does ClamAV work with encrypted/Password protected zip files files.
When a virus mail is zipped in this manner will not the signature of the
attachment differ, if so, will the comparison not fail.
ClamAV will detect the password protected malware archive (zip or rar)
instead of the content inside it.
Searching for signatures that has "pwd" as a part of their name, gives
you an impression of the kind of malware that uses this technique.
Best regards,
Diego d'Ambra
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
