11 Mar
2004
11 Mar
'04
22:36
On Thu, Mar 11, 2004 at 05:03:37PM -0000, Tom Knight wrote:
And how would the scanner know what files were in the *ENCRYPTED* zip? That's the whole problem with worms hidden in encrypted zips. If the scanner could open them to see what files were there, it would just scan the files normally.
There's a bit flag in the zip file header for that purpose (see http://www.pkware.com/products/enterprise/white_papers/appnote.html). -- Michel Messerschmidt lists@michel-messerschmidt.de antiVirusTestCenter, Computer Science, University of Hamburg