ScannerDaemon 0.6.0 released

Kurt Huwig <[email protected]> Sun, 30 May 2004 04:16:40 +0200
Newsgroups gmane.comp.security.virus.openantivirus.announce
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigD5251C669911767E6F871031
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit

Hi!

I just released ScannerDaemon 0.6.0. This version adds support for 23 
archive formats, scans 40% faster and needs only 15% of the memory that 
0.5.2 needed.

The whole scan engine has been completely rewritten. There is now a 
virtual file system which allows files to be deeply nested within 
archives. Just have a look at this scan result:

FOUND 'Eicar-Test-Signature' in '/home/kurt/Viren/test/eicar.1.dar >> 
dar:eicar.dct >> dact >> ppmd:eicar.lzo >> lzop >> arc:eicar.rpm >> 
rpm:rpm.cpio >> cpio:eicar.uuencode.Z >> compress >> uuencode >> 
shar:eicar.cpio >> cpio:eicar.zoo >> zoo:eicar.arj >> arj:eicar.lha >> 
lha:eicar.rar >> rar:eicar.ar >> ar:eicar.zip >> zip:eicar.tar.gz.bz2 >> 
bzip2 >> gzip >> tar:eicar'

The supported archive formats are:

- ace (*)
- ar
- arc
- arj
- bzip2
- cab (*)
- compress
- cpio
- dact
- dar
- gzip
- lha
- lzo
- ppmd
- rar
- rpm
- shar
- tar
- tnef (*)
- upx
- uuencode
- zip
- zoo

(*) these formats are untested as I do now have a packer for these 
formats. If someone is able to create such archives, please drop me a 
message and I will send you a file to pack.

The new version can use the pattern files from the ClamAV-project. There 
is an optimization step necessary. The corresponding PatternOptimizer is 
in the CVS and I will release it soon. I created a VirusSignatures-file 
with the ClamAV virus signatures from today, so that you can test it. 
You can download it from the OAV homepage at

http://www.openantivirus.org/latest.php

Have fun!
-- 
Kurt Huwig             iKu Systemhaus AG        http://www.iku-ag.de/
Vorstand               Am Römerkastell 4        Telefon 0681/96751-0
                        66121 Saarbrücken        Telefax 0681/96751-66
GnuPG 1024D/99DD9468 64B1 0C5B 82BC E16E 8940  EB6D 4C32 F908 99DD 9468

--------------enigD5251C669911767E6F871031
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAuUQMTDL5CJndlGgRAi/7AJ4zcAhIqgl4qihaaSwfotYfq58NUgCfd8fj
4UHz06mGJRPdV4oo57u/dAs=
=eP7c
-----END PGP SIGNATURE-----

--------------enigD5251C669911767E6F871031--



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click