Trend's trouble with some zipfiles

[Schmitt, Andy C - CIDD-2]

I haven't seen any information on whether the latest has the problem, and Google-searches don't show any useful information about a "scan error -82". Our version is probably a couple years old, so it quite easily could have been fixed.

However, in those two years, this is the first time I saw such a problem.  I wonder if it's such a special case that it just hasn't gotten any recognition.  It happened specifically on some zipfiles warned to contain header corruption by unzip.

Andy Schmitt

-----Original Message-----
From: Gerry Doris [mailto:gdoris at rogers.com]
Sent: Friday, January 16, 2004 11:19 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Trend's trouble with some zipfiles


> I'm running MailScanner with Spamassassin and Trend Antivirus.  I noticed
> that on a couple viruses in zipfiles, Trend was unable to open the zip due
> to a slightly corrupted zip header.  unzip was able to open it just fine,
> and so were users' zip programs.  The error from vscan was "Scan error
> -82".
>
> I just got on the list, and did this a while ago, but I wondered if anyone
> else running Trend had a problem with it.  Anyway, this is my workaround
> in SweepViruses.pm, at the end of sub ProcessTrendOutput, just before the
> "return 0;" statement.
>
>   # ACS 11-03-03 -- This bit of code blocks files when decompression
> fails.
>   if ( $line =~ /Scan error -82/i )
>    {
>     my($virus ) = "Unopenable ZIP file";
>
>     my ($dot, $id, $part, @rest) = split (/\//, $trend_prevline);
>     $infections->{$id}{$part} .= $Name . ': ' if $Name;
>     $infections->{$id}{$part} .= "Found virus $virus in file
> $trend_prevline\n";
>     $types->{$id}{$part}      .= "v";
>     return 1;
>    }
>

I've been running Trend for months now and never noticed this error.  Then
again I may not have had a corrupted zip header???

Is this occurring with the latest Trend code?


Gerry