Trend's trouble with some zipfiles

Schmitt, Andy C - CIDD-2 acschmitt at BPA.GOV
Fri Jan 16 18:56:29 GMT 2004


I'm running MailScanner with Spamassassin and Trend Antivirus.  I noticed that on a couple viruses in zipfiles, Trend was unable to open the zip due to a slightly corrupted zip header.  unzip was able to open it just fine, and so were users' zip programs.  The error from vscan was "Scan error -82".

I just got on the list, and did this a while ago, but I wondered if anyone else running Trend had a problem with it.  Anyway, this is my workaround in SweepViruses.pm, at the end of sub ProcessTrendOutput, just before the "return 0;" statement.

  # ACS 11-03-03 -- This bit of code blocks files when decompression fails.
  if ( $line =~ /Scan error -82/i )
   {
    my($virus ) = "Unopenable ZIP file";

    my ($dot, $id, $part, @rest) = split (/\//, $trend_prevline);
    $infections->{$id}{$part} .= $Name . ': ' if $Name;
    $infections->{$id}{$part} .= "Found virus $virus in file $trend_prevline\n";
    $types->{$id}{$part}      .= "v";
    return 1;
   }



More information about the MailScanner mailing list