Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 3582 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ZIP with uncompressed file size set to 0 bytes not checked?

Michael Urspringer

I just sent me some test mails from this web site: https://www.heise.de/security/dienste/emailcheck/virendummies/zip_g0/

The test mail contains a ZIP archive which contains a "eicar.com" virus test file. They somehow set the file size for the uncompressed "eicar.com" to 0 bytes. My Sophos AV for Linux does not seem to detect this file. They already said that some AV scanners are unable to detect these files. But I am worried and I am asking if this is something which can be fixed in Sophos or if this is something where I am doing something wrong?

All other test mails with "eicar.com" from this site are found successfully.

I am using the following version:

Sophos Anti-Virus = 9.13.2
Build Revision = 2694126
Threat detection engine = 3.68.2
Threat data = 5.41
Threat count = 13606968
Threat data release = Tue Jun 27 00:00:00 2017
Last update = Mon Jul 10 09:50:28 2017

Any hint would be appreciated. Thanks



This thread was automatically locked due to age.
Unfiltered HTML