| Scanning Virus in ZIP [message #116675] |
Tue, 14 October 2014 14:40  |
pcgrafix
Messages: 15
Registered: January 2012
Location: Belgium
|
|
|
|
Hi,
It seems that the antivirus scanner (or filetype scanner) is not checking a ZIP file.
An attachment(zip) with a file inside .scr was send to the user mailbox.
I thought Kerio was also checking inside a ZIP file.
Thanks
Horemans Tom
PC GRAFIX
|
|
|
|
| Re: Scanning Virus in ZIP [message #116676 is a reply to message #116675] |
Tue, 14 October 2014 15:39  |
Grabsteinschubser
Messages: 64
Registered: May 2013
Location: Berlin
|
|
|
|
|
Kerio is checking insinde zip files but sometimes the viruses are newer than the pattern of the antivirus scanner. You can check this at virustotal.com (and if your antivirus vendor can not find any virus you can/should send an example to your antivirus vendor - e.g. Sophos)
|
|
|
|
|
|
|
|
| Re: Scanning Virus in ZIP [message #116714 is a reply to message #116712] |
Wed, 15 October 2014 10:48 |
phil_w
Messages: 9
Registered: March 2005
Location: UK
|
|
|
|
Think I'm going to have look at a separate gateway before the mailserver. Unfortunately another minus point that helps my CEO's want to move to Hosted Exchange 
|
|
|
|
|
|
|
|
|
|
|
|
| Re: Scanning Virus in ZIP [message #116747 is a reply to message #116675] |
Thu, 16 October 2014 00:59 |
graeme
Messages: 38
Registered: October 2013
|
|
|
|
Not that we are affected much or at all since we have a specialist product before Kerio.
A simple way to block a large chunk would be able to filter not virus scan extensions within RAR, ZIP, 7ZIP etc.
If you can block cmd, bat, exe, scr, java etc you can stop a large chunk of mass mail malware.
Any plans to release checking within archives? So many people have mentioned this also.
|
|
|
|
| Re: Scanning Virus in ZIP [message #116763 is a reply to message #116675] |
Thu, 16 October 2014 12:37 |
BMAdmin
Messages: 21
Registered: July 2013
Location: UK
|
|
|
|
|
Can this feature be added at some stage. We too are having to quarantine ZIP files until they are manually checked due to them containing unrecognised executables.
|
|
|
|
|
|
|
|
| Re: Scanning Virus in ZIP [message #120426 is a reply to message #116769] |
Wed, 01 April 2015 17:25 |
Machete
Messages: 187
Registered: February 2012
Location: United States
|
|
|
|
Just to confirm from the first reply of this post -
- Connect does scan inside .zip attachments for Virus? I just had a user open an .exe that inside a zip file and I'm now evaluating where the holes are in my protection - in addition to her desktop AV not being up to date somehow...
- Does Connect scan inside .zip attachments for blocked file types? I have ZIPs allowed - but block .exe's
|
|
|
|
| Re: Scanning Virus in ZIP [message #120427 is a reply to message #116675] |
Wed, 01 April 2015 17:29 |
ComputerBudda
Messages: 112
Registered: January 2013
Location: DFW - USA
|
|
|
|
|
I treat all zip attachments like malware, send the original mail to the user w/o the zip attachment. Send the original mail with attachment to a special email address that the administrator has access to. The user knows to go to the administrator if they need the attachment. 90% of attached zip files are an attempt to infect.
|
|
|
|
Members
Search
Help
Register
Login
Home
