Re: [Exim] Encrypted Viruii

Top Page
Delete this message
Reply to this message
Author: Alan Thew
Date:  
To: Nigel Metheringham
CC: Exim List
Subject: Re: [Exim] Encrypted Viruii
On Wed, 3 Mar 2004 14:01 , Nigel Metheringham <Nigel.Metheringham@???...:

> On Wed, 2004-03-03 at 13:42, Ron McKeating wrote:
> > If the attachment has been encrypted then there is no way the virus
> > scanner can see the virus inside it. I recieved 4 last night when
> > I save the attachement it is called "MoreInfo.zip".
> > If I run the virus scanner against this file then it comes up clean.
> > However if I try to unzip it it asks for a password, the password was
> > in the body of the message.
> >
> > Are you saying your virus scanner can read data inside an encrypted file
> > ???
>
> How is zip encryption done? Is the central directory encrypted or just
> the file payloads?
>
> If its just the file payloads then you would be able to see name &
> metadata (including size and maybe crc).
>

unzip -l will report the filename, size etc..

--
Alan Thew                                       alan.thew@???
Computing Services,University of Liverpool      Fax: +44 151 794-4442