Dear List,
I forgot to add that, we still receive mails having PDF files as
attachments and they are password protected (like Bank statements
etc). Are such files really encrypted or they are just password
protected? If they are encrypted, how do we block such attachments
also?
Regards,
ANANT.
----- Message from a...@isac.gov.in ---------
Date: Wed, 25 Nov 2009 08:41:45 +0530
From: ANANT S ATHAVALE <a...@isac.gov.in>
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
Subject: Re: [Clamav-users] ArchiveBlockEncrypted.
To: clamav-users@lists.clamav.net
Dear Bryan,
Thanks your inputs. We will take this into account and will tell
management about this.
Regards,
ANANT.
----- Message from br...@skiblack.com ---------
Date: Tue, 24 Nov 2009 09:28:29 -0500
From: Bryan Blackwell <br...@skiblack.com>
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
Subject: Re: [Clamav-users] ArchiveBlockEncrypted.
To: ClamAV users ML <clamav-users@lists.clamav.net>
Greetings,
In general terms, I'd say if something can read an encrypted
archive without the password, then the encryption isn't very good.
More likely, ClamAV reads the file without decrypting and doesn't
find a pattern match, so it says it's ok - not the fault of the
software, I wouldn't expect otherwise. A better test would be to
take an AV test file, encrypt it, and run it through. I'll bet
ClamAV doesn't find it.
--Bryan
-- Bryan Blackwell --
Unix Systems Engineer
br...@skiblack.com
On Nov 24, 2009, at 12:28 AM, ANANT S ATHAVALE wrote:
I was just testing an encrypted file using clamscan. Though it
was password protected, it could scan and tell that it is not
infected with Virus. Then in that case, is it OK to allow
encrypted files?
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from br...@skiblack.com -----
Regards,
Anant Athavale.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from a...@isac.gov.in -----
Regards,
Anant Athavale.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
