[Exim] Re: Re: [exiscanusers] Zip virus protected by passwor…

Top Page
Delete this message
Reply to this message
Author: Wolfgang.Fuertbauer
Date:  
To: Wolfgang.Fuertbauer
CC: R.B. (Rick), exim-users, exiscanusers@duncanthrax.net
Subject: [Exim] Re: Re: [exiscanusers] Zip virus protected by password
caution: type
of course it is:

av_scanner
and not av_scanner1

Wolfgang

Wolfgang.Fuertbauer@??? schrieb am 05.03.2004 12:54:19:

> I posted a workaround some days ago:
>
> av_scanner1=cmdline:/usr/local/bin/uvscan --secure -rv --summary --
> noboot --allo
> le --analyse --mime --program --unzip %s:password-protected|Found:
> (Found.*|is pa
> ssword-.*)
>
> this uses the fact, that uvscan gives an "password-protected" message
>
> I opened a case at NAI ...
>
> Have fun
> Wolfgang
>
> "R.B. (Rick)" <black.hawk@???> schrieb am 05.03.2004 12:14:54:
>
> > Hi all,
> > i'm using exim 4.30 with exiscan and uvscan antivirus. Now...i'm
> > receiving a lot of viruses with zip protected by password... exiscan
> > grep uvscan output for Found string and so this zip password protected
> > aren't scanned.
>
> > Unfortunately i see that ?$ is always 0 in case of good attachment and
> > in case of password protected zip.
>
> > We would like to reject password protected zip..maybe grepping
> > 'password protected' too...
>
> > any ideas?
>
> > Thanks
>
> > Riccardo
>
> ----------------------------------------------------------------------
> Wolfgang Fuertbauer (E-Mail: Wolfgang.Fuertbauer@???)
> EBEWE Pharma                          Tel: ++43 7665 8123 315
> Mondseestrasse 11                     Fax: ++43 7665 8123 11
> 4866  Unterach, Austria
> http://www.ebewe.com


----------------------------------------------------------------------
Wolfgang Fuertbauer (E-Mail: Wolfgang.Fuertbauer@???)
EBEWE Pharma                          Tel: ++43 7665 8123 315
Mondseestrasse 11                     Fax: ++43 7665 8123 11
4866  Unterach, Austria
http://www.ebewe.com