Do anti-virus scan zip password protected files?

Angelo Lopes schrieb:

> Kaspersky do _not_ scan zip password protected files.

Of course it doesn't, cause the file is password protected.
Or are you able to open a password protected zip file although you don't
know the password?

> Does anybody know if NOD32 and VirusScan Enterpise 7.0
> scan Zi protected files?

Neither NOD32 nor any other AV program can check password protected zip
files.

Regards, Torti
 >> Stay informed about: Do anti-virus scan zip password protected files? 

On Sat, 06 Sep 2003 13:06:08 +0200, Torti Schlumpf
<tortischlumpf.DeleteThis@arcor.de> wrote:

>Angelo Lopes schrieb:
>
>> Kaspersky do _not_ scan zip password protected files.
>
>Of course it doesn't, cause the file is password protected.
>Or are you able to open a password protected zip file although you don't
>know the password?

Yes, I am able to open a password protected zip file without knowing
the password, and check what files are inside.
What I am *not* able to do, is to extract those files without knowing
the password.
Is this important? Yes. I have Kaspersky on my Linux box firewall,
and it keeps deleting password protected files.
I _want_ to know what kind of files came "inside" the zip...


>
>> Does anybody know if NOD32 and VirusScan Enterpise 7.0
>> scan Zi protected files?
>
>Neither NOD32 nor any other AV program can check password protected zip
>files.

And that's what I wanted to know. Thank you.

More on that: Scanning a zip pw protected file, NOD32 reports 0 files
scanned and VirusScan reports 4 files scanned, 0 infected. You may
want to test this. Rather strange, isn't it?

>Regards, Torti
Regards,
--
Angelo Lopes da Silva
Porto, Portugal
 >> Stay informed about: Do anti-virus scan zip password protected files? 

This message is not archived
 >> Stay informed about: Do anti-virus scan zip password protected files? 

On Sat, 06 Sep 2003 12:07:47 GMT, Bill <seesig DeleteThis @nospam.null> wrote:

>On Sat, 06 Sep 2003 11:54:13 +0100, Angelo Lopes <my_name DeleteThis @yaooh.com>
>wrote:
>
>>Kaspersky do _not_ scan zip password protected files.
>>Does anybody know if NOD32 and VirusScan Enterpise 7.0
>>scan Zi protected files?
>>Thanks in advance,
>
>
>AV programs typically unzip the file in memory and scan the contents.
>If the file is password protected then it cannot be opened to be
>scanned.
>
Create a zip file with, say, 4 files inside, password protect it,
scan it with VirusScan, and it will report:

06-09-2003 13:18 Scan Settings ANGELO\ALopes CPU Max %
Usage : 100
06-09-2003 13:18 Scan Settings ANGELO\ALopes Exclusions
06-09-2003 13:18 Scan Settings ANGELO\ALopes Scan targets
06-09-2003 13:18 Scan Settings ANGELO\ALopes C:\SHARE\NEW
FOLDER
06-09-2003 13:18 Password Protected ANGELO\ALopes Unable to scan
C:\SHARE\NEW FOLDER\ZipPW.zip\EXCEL.XLS as it is encrypted or password
protected
06-09-2003 13:18 Scan Summary ANGELO\ALopes Scan Summary
06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
scanned : 1
06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
infected : 0
06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
cleaned : 0
06-09-2003 13:18 Scan Summary ANGELO\ALopes Files scanned
: 4
06-09-2003 13:18 Scan Summary ANGELO\ALopes Files infected
: 0
06-09-2003 13:18 Scan Summary ANGELO\ALopes Files cleaned
: 0
06-09-2003 13:18 Scan Summary ANGELO\ALopes Files deleted
: 0
06-09-2003 13:18 Scan Summary ANGELO\ALopes Files moved
: 0
06-09-2003 13:18 Scan Complete ANGELO\ALopes On-Demand Scan

It is _not_ true file cannot be opened. It's true file can't be
scanned

Regards,
--
Angelo Lopes da Silva
Porto, Portugal
 >> Stay informed about: Do anti-virus scan zip password protected files? 

On Sat, 06 Sep 2003 15:31:32 GMT, Bill <seesig.DeleteThis@nospam.null> wrote:

>On Sat, 06 Sep 2003 15:32:38 +0100, Angelo Lopes <my_name.DeleteThis@yaooh.com>
>wrote:
>
>>Yes, I am able to open a password protected zip file without knowing
>>the password, and check what files are inside.
>>What I am *not* able to do, is to extract those files without knowing
>>the password.
>
>
>Then you're not really opening it. It's just allowing you to see file
>names. Big difference.
>

Yes, you are right. Sometimes knowing the names.extensions is better
than nothing though. Next time we "speak" in Portuguese, OK?
Bill, Thank you very much for your reply

--
Angelo Lopes da Silva
Porto, Portugal
 >> Stay informed about: Do anti-virus scan zip password protected files? 

"Angelo Lopes" <my_name RemoveThis @yaooh.com> wrote in message news:41sjlvg7fjfki1avo833jqt9ib8lh80v2t@4ax.com...
> On Sat, 06 Sep 2003 12:07:47 GMT, Bill <seesig RemoveThis @nospam.null> wrote:
>
> >On Sat, 06 Sep 2003 11:54:13 +0100, Angelo Lopes <my_name RemoveThis @yaooh.com>
> >wrote:
> >
> >>Kaspersky do _not_ scan zip password protected files.
> >>Does anybody know if NOD32 and VirusScan Enterpise 7.0
> >>scan Zi protected files?
> >>Thanks in advance,
> >
> >
> >AV programs typically unzip the file in memory and scan the contents.
> >If the file is password protected then it cannot be opened to be
> >scanned.
> >
> Create a zip file with, say, 4 files inside, password protect it,
> scan it with VirusScan, and it will report:
>
> 06-09-2003 13:18 Scan Settings ANGELO\ALopes CPU Max %
> Usage : 100
> 06-09-2003 13:18 Scan Settings ANGELO\ALopes Exclusions
> 06-09-2003 13:18 Scan Settings ANGELO\ALopes Scan targets
> 06-09-2003 13:18 Scan Settings ANGELO\ALopes C:\SHARE\NEW
> FOLDER
> 06-09-2003 13:18 Password Protected ANGELO\ALopes Unable to scan
> C:\SHARE\NEW FOLDER\ZipPW.zip\EXCEL.XLS as it is encrypted or password
> protected
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Scan Summary
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
> scanned : 1
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
> infected : 0
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
> cleaned : 0
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files scanned
> : 4
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files infected
> : 0
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files cleaned
> : 0
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files deleted
> : 0
> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files moved
> : 0
> 06-09-2003 13:18 Scan Complete ANGELO\ALopes On-Demand Scan
>
> It is _not_ true file cannot be opened. It's true file can't be
> scanned

The zip file (a container) can be opened and scanned. The compressed
(and probably encrypted) files within the container cannot be accessed
(without supplying the proper password) because they aren't even existing
as files until they are decompressed (or decrypted) and placed in the file
system as such by the unzipping program.
 >> Stay informed about: Do anti-virus scan zip password protected files? 

On Sat, 6 Sep 2003 19:54:19 -0400, "FromTheRafters" <!0000@nomad.fake>
wrote:

>
>"Angelo Lopes" <my_name DeleteThis @yaooh.com> wrote in message news:41sjlvg7fjfki1avo833jqt9ib8lh80v2t@4ax.com...
>> On Sat, 06 Sep 2003 12:07:47 GMT, Bill <seesig DeleteThis @nospam.null> wrote:
>>
>> >On Sat, 06 Sep 2003 11:54:13 +0100, Angelo Lopes <my_name DeleteThis @yaooh.com>
>> >wrote:
>> >
>> >>Kaspersky do _not_ scan zip password protected files.
>> >>Does anybody know if NOD32 and VirusScan Enterpise 7.0
>> >>scan Zi protected files?
>> >>Thanks in advance,
>> >
>> >
>> >AV programs typically unzip the file in memory and scan the contents.
>> >If the file is password protected then it cannot be opened to be
>> >scanned.
>> >
>> Create a zip file with, say, 4 files inside, password protect it,
>> scan it with VirusScan, and it will report:
>>
>> 06-09-2003 13:18 Scan Settings ANGELO\ALopes CPU Max %
>> Usage : 100
>> 06-09-2003 13:18 Scan Settings ANGELO\ALopes Exclusions
>> 06-09-2003 13:18 Scan Settings ANGELO\ALopes Scan targets
>> 06-09-2003 13:18 Scan Settings ANGELO\ALopes C:\SHARE\NEW
>> FOLDER
>> 06-09-2003 13:18 Password Protected ANGELO\ALopes Unable to scan
>> C:\SHARE\NEW FOLDER\ZipPW.zip\EXCEL.XLS as it is encrypted or password
>> protected
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Scan Summary
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
>> scanned : 1
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
>> infected : 0
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Boot sectors
>> cleaned : 0
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files scanned
>> : 4
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files infected
>> : 0
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files cleaned
>> : 0
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files deleted
>> : 0
>> 06-09-2003 13:18 Scan Summary ANGELO\ALopes Files moved
>> : 0
>> 06-09-2003 13:18 Scan Complete ANGELO\ALopes On-Demand Scan
>>
>> It is _not_ true file cannot be opened. It's true file can't be
>> scanned
>
>The zip file (a container) can be opened and scanned. The compressed
>(and probably encrypted) files within the container cannot be accessed
>(without supplying the proper password) because they aren't even existing
>as files until they are decompressed (or decrypted) and placed in the file
>system as such by the unzipping program.
>
>
Thx a million
--
Angelo Lopes da Silva
Porto, Portugal
 >> Stay informed about: Do anti-virus scan zip password protected files?