[Exim] Re: [exiscanusers] Zip virus protected by password

Top Page
Delete this message
Reply to this message
Author: Wolfgang.Fuertbauer
Date:  
To: R.B. (Rick)
CC: exim-users, exiscanusers@duncanthrax.net
Subject: [Exim] Re: [exiscanusers] Zip virus protected by password
Dies ist eine mehrteilige Nachricht im MIME-Format.
--
[ Picked text/plain from multipart/alternative ]
I posted a workaround some days ago:

av_scanner1=cmdline:/usr/local/bin/uvscan --secure -rv --summary --noboot
--allo
le --analyse --mime --program --unzip
%s:password-protected|Found:(Found.*|is pa
ssword-.*)

this uses the fact, that uvscan gives an "password-protected" message

I opened a case at NAI ...

Have fun
Wolfgang

"R.B. (Rick)" <black.hawk@???> schrieb am 05.03.2004 12:14:54:

> Hi all,
> i'm using exim 4.30 with exiscan and uvscan antivirus. Now...i'm
> receiving a lot of viruses with zip protected by password... exiscan
> grep uvscan output for Found string and so this zip password protected
> aren't scanned.


> Unfortunately i see that ?$ is always 0 in case of good attachment and
> in case of password protected zip.


> We would like to reject password protected zip...maybe grepping
> 'password protected' too...


> any ideas?


> Thanks


> Riccardo



----------------------------------------------------------------------
Wolfgang Fuertbauer (E-Mail: Wolfgang.Fuertbauer@???)
EBEWE Pharma                          Tel: ++43 7665 8123 315
Mondseestrasse 11                     Fax: ++43 7665 8123 11
4866  Unterach, Austria
http://www.ebewe.com
--