Re: [Clamav-users] AES encrypted zips causing scan error

OK - this seems to be a 'known issue'. A patch is here if other are having this problem: http://blog.gmane.org/gmane.comp.security.virus.clamav.devel Does anyone know if/when this will be fixed in a stable release? Thanks, Chris --- Chris Masters <[EMAIL PROTECTED]>

[Clamav-users] AES encrypted zips causing scan error

Hi All, WinZip 9 256 bit AES encrypted zip files cause errors [tested against 0.85.1]. We're calling clam from MIMEDefang and the scan returns an error. Other encrypted zip files scan OK. Is there any way round this as we have users wanting to get these files through? Thanks, Chris LibClamA

Re: [Clamav-users] HTML/[EMAIL PROTECTED]

You're right. Apologies. Chris --- Tomasz Kojm <[EMAIL PROTECTED]> wrote: > On Mon, 2 May 2005 13:12:00 -0700 (PDT) > Chris Masters <[EMAIL PROTECTED]> wrote: > > > Hi All, > > > > Is anyone else getting hit by this right now? > > >

[Clamav-users] HTML/[EMAIL PROTECTED]

Hi All, Is anyone else getting hit by this right now? It seems to be picking it up on seemingly genuine mail. Can anyone confirm that this is not a detection error? Thanks, Chris __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam pro

Re: [Clamav-users] Virus-bounce emails

> > I understand. Is it possible to send me the entire > original file for me to look at? > I'll then be in a better position to comment > knowledgeably. > Thanks for your help on this Nigel. I'll let you know if I manage to reproduce. __ Do You

Re: [Clamav-users] Virus-bounce emails

--- Nigel Horne <[EMAIL PROTECTED]> wrote: > On Tuesday 19 Apr 2005 09:23, Chris Masters wrote: > > > > > 3) Should clam detect the virus when given the > > > entire > > > > bounce message? > > > > > > Yes, if you have a sample

Re: [Clamav-users] Virus-bounce emails

Thanks for your comments Nigel. > > > > So, some questions: > > > > 1) How dangerous are these virus-bounces? > > In theory not at all, but I don't trust MUAs not to > be broken > so clamAV does look for and find them. Exactly! > > > 2) Should clam detect the virus when given the > > text/plai

[Clamav-users] Virus-bounce emails

Hi All, We've had some problems with ligitimate bounces coming from qmail that contain one text/plain mime part. This single mime part contains some error information and then the original raw infected mail in MIME format. We scan emails on a part by part basis, so clam was given the text/plain b

Re: [Clamav-users] virus signature version

Yes - the db version. Many thanks! --- Tomasz Papszun <[EMAIL PROTECTED]> wrote: > On Wed, 12 Jan 2005 at 7:37:00 -0800, Chris Masters > wrote: > > Is there an easy way to retreive the virus > signature > > version from clam other than calling cl_retver()? > &g

[Clamav-users] virus signature version

Is there an easy way to retreive the virus signature version from clam other than calling cl_retver()? Thanks, Chris __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail ___

Re: [Clamav-users] ArchiveMaxCompressionRatio problem

Ahh OK, it's on a file by file basis - thanks. --- Matt <[EMAIL PROTECTED]> wrote: > Chris Masters wrote: > > > I'm guessing that the ratio is calculated > literally as > > the ratio difference between the inflated and > deflated > > size. > >

[Clamav-users] ArchiveMaxCompressionRatio problem

Hi All, I have a problem with a zip file with clamav-0.80: inflated = 54KB deflated = 1100KB I have ArchiveMaxCompressionRatio set to default (250) and this zip file is being tagged as Oversized.Zip. I'm guessing that the ratio is calculated literally as the ratio difference between the i