Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-14 Thread Steven Morgan
OK, thanks. Steve On Thu, Sep 14, 2017 at 5:40 AM, Gandalf Corvotempesta < gandalf.corvotempe...@gmail.com> wrote: > Opened https://bugzilla.clamav.net/show_bug.cgi?id=11911 > > 2017-09-13 19:01 GMT+02:00 Steven Morgan : > > OK, open a ticket and we can look at it. > > > > On Wed, Sep 13, 2017 a

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-14 Thread Gandalf Corvotempesta
Opened https://bugzilla.clamav.net/show_bug.cgi?id=11911 2017-09-13 19:01 GMT+02:00 Steven Morgan : > OK, open a ticket and we can look at it. > > On Wed, Sep 13, 2017 at 12:57 PM, Gandalf Corvotempesta < > gandalf.corvotempe...@gmail.com> wrote: > >> Ok, but why clam is treating encrypted pdf as

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Steven Morgan
OK, open a ticket and we can look at it. On Wed, Sep 13, 2017 at 12:57 PM, Gandalf Corvotempesta < gandalf.corvotempe...@gmail.com> wrote: > Ok, but why clam is treating encrypted pdf as encrypted archive ? > I've set ArchiveBlockEncrypted to yes, but, as wrote in the setting > name, I would like

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Gandalf Corvotempesta
Ok, but why clam is treating encrypted pdf as encrypted archive ? I've set ArchiveBlockEncrypted to yes, but, as wrote in the setting name, I would like to block encrypted *archives*. A PDF is not an archive, thus it should not be blocked. I think this is a bug. 2017-09-13 16:09 GMT+02:00 Reindl

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Steven Morgan
Please open a ticket for this at bugzilla.clamav.net. Steve On Wed, Sep 13, 2017 at 10:09 AM, Reindl Harald wrote: > > > Am 13.09.2017 um 15:57 schrieb Gandalf Corvotempesta: > >> So, the only way to block encrypted ZIP is also to block any encrypted or >> password protected PDF? >> > > with on

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Reindl Harald
Am 13.09.2017 um 15:57 schrieb Gandalf Corvotempesta: So, the only way to block encrypted ZIP is also to block any encrypted or password protected PDF? with one clamd instance yes on a smart setup you run two instances and one is just used for scoring in spamassassin (or in my case i edited

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Gandalf Corvotempesta
So, the only way to block encrypted ZIP is also to block any encrypted or password protected PDF? Il 13 set 2017 3:49 PM, "Reindl Harald" ha scritto: > > > Am 13.09.2017 um 15:45 schrieb Gandalf Corvotempesta: > >> Hi to all >> I would like to block any encrypted/password protected ZIP/RAR,

Re: [clamav-users] ArchiveBlockEncrypted and PDF

2017-09-13 Thread Reindl Harald
Am 13.09.2017 um 15:45 schrieb Gandalf Corvotempesta: Hi to all I would like to block any encrypted/password protected ZIP/RAR, and so on but *NOT* blocking any encrypted PDF. Currently, ClamAV is blocking any encrypted PDF with Heuristics.Encrypted.PDF How can I only block real archived

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-26 Thread G.W. Haywood
Hi there, On Nov 24, 2009, ANANT S ATHAVALE wrote: > I was just testing an encrypted file using clamscan. Though it was > password protected, it could scan and tell that it is not infected > with Virus. When Clamav performs a scan and no virus is found, you know only that a pice of software tol

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-25 Thread ANANT S ATHAVALE
- Date: Wed, 25 Nov 2009 15:55:34 +0100 From: Matus UHLAR - fantomas Reply-To: ClamAV users ML Subject: Re: [Clamav-users] ArchiveBlockEncrypted. To: clamav-users@lists.clamav.net On 25.11.09 08:59, ANANT S ATHAVALE wrote: I forgot to add that, we still receive mails having

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-25 Thread Matus UHLAR - fantomas
On 25.11.09 08:59, ANANT S ATHAVALE wrote: > I forgot to add that, we still receive mails having PDF files as > attachments and they are password protected (like Bank statements etc). > Are such files really encrypted or they are just password protected? If > they are encrypted, how do we blo

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-24 Thread ANANT S ATHAVALE
? Regards, ANANT. - Message from a...@isac.gov.in - Date: Wed, 25 Nov 2009 08:41:45 +0530 From: ANANT S ATHAVALE Reply-To: ClamAV users ML Subject: Re: [Clamav-users] ArchiveBlockEncrypted. To: clamav-users@lists.clamav.net Dear Bryan, Thanks your inputs. We will take

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-24 Thread ANANT S ATHAVALE
Dear Bryan, Thanks your inputs. We will take this into account and will tell management about this. Regards, ANANT. - Message from br...@skiblack.com - Date: Tue, 24 Nov 2009 09:28:29 -0500 From: Bryan Blackwell Reply-To: ClamAV users ML Subject: Re: [Clamav-users

Re: [Clamav-users] ArchiveBlockEncrypted.

2009-11-24 Thread Bryan Blackwell
Greetings, In general terms, I'd say if something can read an encrypted archive without the password, then the encryption isn't very good. More likely, ClamAV reads the file without decrypting and doesn't find a pattern match, so it says it's ok - not the fault of the software, I wouldn'

Re: [Clamav-users] ArchiveBlockEncrypted

2004-05-03 Thread Fajar A. Nugraha
Sam Smith wrote: I have not kept up with the password protected archive virus development. Is it still necessary to block password protected zip files? No need :) Or can clamd now detect viruses in a password protected zrchive? It has been for a long time. If you're paranoid, however, you can