McAfee and password-protected zip file detection in MS

Denis Beauchemin Denis.Beauchemin at USHERBROOKE.CA
Wed Mar 3 14:45:51 GMT 2004


Hi all,

I tried to modify SweepViruses.pm so it could grab McAfee's "is
password-protected" string and just treat the attachment as a virus but
it doesn't work...

I modified ProcessMcAfeeOutput() this way:
  #return 0 unless $line =~ /Found/;
  return 0 unless (($line =~ /Found/) or ($line =~ /is password-protected/));

Any ideas why it is not kicking in?  Could it be because McAfee returns
a zero return code if it detects a password-protected zip file (I know
this is what it does)?

If so, could there be another way of achieving the same result without
having to upgrade to the latest unstable version?

Thanks!

Denis
-- 
Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x2252 F: 819.821.8045




More information about the MailScanner mailing list