McAfee and password-protected zip file detection in MS

Richard Bollinger rabollinger at COMCAST.NET
Wed Mar 3 18:56:44 GMT 2004


Add this change to combine stderr with stdout:

--- mcafee-wrapper.FCS Sat Dec 14 05:07:56 2002
+++ mcafee-wrapper Wed Mar  3 12:48:38 2004
@@ -46,5 +46,4 @@
   exit 1
 fi

-exec ${PackageDir}/$prog -d $datDIR "$@"
-
+exec ${PackageDir}/$prog -d $datDIR "$@" 2>&1


----- Original Message -----
From: "Denis Beauchemin" <Denis.Beauchemin at USHERBROOKE.CA>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, March 03, 2004 9:45 AM
Subject: McAfee and password-protected zip file detection in MS


Hi all,

I tried to modify SweepViruses.pm so it could grab McAfee's "is
password-protected" string and just treat the attachment as a virus but
it doesn't work...

I modified ProcessMcAfeeOutput() this way:
  #return 0 unless $line =~ /Found/;
  return 0 unless (($line =~ /Found/) or ($line =~ /is password-protected/));

Any ideas why it is not kicking in?  Could it be because McAfee returns
a zero return code if it detects a password-protected zip file (I know
this is what it does)?

If so, could there be another way of achieving the same result without
having to upgrade to the latest unstable version?

Thanks!

Denis
--
Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x2252 F: 819.821.8045




More information about the MailScanner mailing list