> Oversized.Zip
> > 
>  From man clamscan:
>         --block-max
>                Mark   archives   as   viruses   (e.g.    
>                RAR.ExceededFileSize,
>                Zip.ExceededFilesLimit)  if max-files, max-space, 
>                or max-recursion is reached.
>         --max-recursion=#n
>                Set archive recursion level limit. This option 
>                protects your system against DoS attacks (default: 8).
> 
>         --max-ratio=#n
>                Set  maximum  archive compression ratio limit. 
>                This option protects your system against DoS attacks
>               (default: 250).
> 
> So you can use --max-recursion=? and --max-ratio=?; play with the 
> values and see if you can get through.
> 
> BTW your zip archive is not typical, it may be a real DoS attempt, 
> for example here's a result with an ordinary (4.4M) zip file using
> Cygwin's own version of clamav-0.83:
> 

I created the zip file myself so I don't think there's anything wrong
with it.  It contains some binary files requested by the support people
I'm working with on another issue.

I'll do some more experiments and see if I can narrow it down any.

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to