wendy.zip - encrypted - mimail

[Tim Bishop]

On Thu, Dec 04, 2003 at 08:26:52AM +0100, shrek-m at gmx.de wrote:
> $ sweep -archive wendy.zip
> [...]
> Password protected file wendy.zip/wendy.exe
>
> 1 file swept in 1 second.
> 1 error was encountered.
> No viruses were discovered.
> 1 encrypted file was not checked.

More worryingly, if you do unzip this some virus scanners don't detect
the .exe file as a virus. Neither f-prot or f-secure detected the .exe
as a virus, although sophos did.

But as you say, that's going to be irrelevent if we can't even look
inside the zip file.

I guess a good compromise would be to have an option to block encrypted
zip files in mailscanner?

Cheers,
Tim.

--
Tim Bishop
http://www.bishnet.net/tim
PGP Key: 0x5AE7D984