> Not needed.  It would be too easy for virus writers to just change the name
> and/or some property to trick defenses, so anti virus software doesn't care
> about that.

Ok, from what you are saying, ClamAV should therefore be as effective to scan a 
file named 00001.temp than if it were named for example MyDocument.doc.scr 
(which might be more likely, by its name, to contain a virus..).  Good :)

> With java you probably are using jars, which are just zip files which clamsc
> an
> can decompress and check with no problem.

No, we are using a proprietary binary format to encapsulate real files.  In 
other words, storing file MyDocument.doc of 5000 bytes in our system results in 
a database file with a metadata header of 1024 bytes followed by the actual 
file data, thus producing a 6024-byte file in this example.  For a number of 
reasons, we cannot change the way this structured, so we'll instead extract 
real file data to temporary files and have ClamAV scan them.

Thanks for the quick response.

Sylvain
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to