RE : Sophie message: Error: File was encrypted

i'm using sophie 1.44 on a RH9 box.
Sophie 3.04 compile perfectly but did not catch some viruses. Don't know why.
Sophie1.44 catches where Sophie3.04 doesn't. With the same libsavi. Same box. Same file. Same test conditions.

For the encryption problem when compiled without hacking it sophie doesn't consider an encrypted file as a fatal error.
See lot's of discussions in this list about blocking encrypted files or not. Sophie "naturally" doesn't as far as I know.

Patrice Blot
FC-NET
 


> -----Message d'origine-----
> De : [email protected] 
> [mailto:[email protected]] De la part de Gerard Earley
> Envoyé : mardi 11 janvier 2005 00:53
> À : Discussion about Virge/Sophie/Trophie/...
> Objet : Re: [vtools] Sophie message: Error: File was encrypted
> 
> 
> i suspect that the file being scanned by sophie was an 
> encrypted zipfile 
> or somesuch.
> try testing with an encrypted zip and I bet it will give you the same 
> warning.
> 
> PS) How did you get sophie running on a RH 9 
> box...????????????????????????/
> 
> 
> Iris Silva wrote:
> 
> > Hi everyone.
> >
> > I have a Redhat 9 box, with: Dual Sendmail + Amavisd-New 2.2.1 + 
> > Sophie 3.04rc2 + sophos
> >
> > Im getting the messages detailed below, does anybody knows 
> how to deal 
> > with that stuff? I did a search at internet with no success.
> >
> > Jan 10 16:01:48 av1 sophie[24617]: WARNING          : 
> Error: File was 
> > encrypted
> > Jan 10 16:01:48 av1 sophie[24617]: WARNING          : 
> Error: File was 
> > encrypted
> > Jan 10 16:01:49 av1 sophie[24568]: WARNING          : 
> Error: File was 
> > encrypted
> >
> > Thank you very much for your help.
> >
> > -----------------------------------------
> > sweep -v output:
> >
> > Product version           : 3.89.0
> > Engine version            : 2.27.1
> > Virus data version        : 3.89
> > User interface version    : 2.07.082
> > Platform                  : Linux/Intel
> > Released                  : 03 January 2005
> > Total viruses (with IDEs) : 98175
> >
> > --------------
> >
> > sophie -v output :
> > Sophos engine    : Sophos engine version 2.27
> > Sophie IDE       : Sophos IDE version 3.89 (detects 98175 viruses)
> > SAVI config      : /etc/sophie.savi
> > Max processes    : 20
> > Socket path      : /var/run/sophie
> > Umask            : 7
> > PID file         : /var/run/sophie.pid
> > Timeout          : 300 seconds
> > Running as user  : amavisd
> > Socket group     : amavisd
> > Logname          : sophie
> > Log facility     : 16 (mail)
> > Log priority     : 5 (notice)
> > Error strings?   : yes
> > Timestamps?      : no
> > Show virus name? : yes
> > Callbacks?       : yes
> > limit_classif    : 10
> > limit_nextfile   : 10000
> > limit_decompr    : 1000
> > socket_check     : yes
> > Sophie version   : 3.04rc2
> >
> > _______________________________________________
> > vtools mailing list
> > [email protected]
> > http://www.vanja.com/list/listinfo.cgi/vtools
> 
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>