ESA scanning for a file inside of a zip inside of another zip.

There is a new file-encrypting ransomware called CTB-Locker going around that places a malicious .cab file inside of a .zip file inside of another .zip file. Two questions:
1) How far will an ESA scan depth wise into zips inside of zips.
2) Is a .cab file considered an executable by ESA or something else? If it is considered an executable, would a block based off of this match (attachment-filetype == “Executable”) catch this type threat?
Reference to the CTB-Locker: https://www.f-secure.com/weblog/archives/00002788.html
Thanks

As an additional safe-gap measure, i would also suggest (unless of course you're receiving a lot of emails with .cab attachments normally) to put in an extra filter to quarantine emails with .cab attachments as most of the attacks seen are coming as .cab formats at the moment.
In terms of how deep it'll look in.
for .zip .rar filetypes, it will look as deep as you've set it.
So if it's a viral file inside a zip (where the viral file is an executable) it will be unable to unpack up the zip and capture the executable at the content/filter levels.
However normally the AV engine itself (mcafee and sophos) should be able to sort it out for you assuming the viral definition is available already.

Similar Messages

"The upload has failed. There was a problem running a virus scan for the file." any ideas???

"The upload has failed.
There was a problem running a virus scan for the file. "
This is the message i get when tryng to update
any ideas?

Error: "svr.VirusScanExecutionError"
An intermittent problem with acrobat.com's underlying virus scan component causes this issue. This issue happens occasionally on a small number of server instances.
The solution is to update the article again. Trying again typically routes you to a different host in the server array.

Scanning for additional file extensions

Hi
We have a requirement to scan and report back PCs which have database files on the local drives, and I am struggling to configure ZCM Inventory to scan for files with the mdb extension. I have checked the product documentation and do not seem to have missed anything
In the Device Inventory settings section on the Configuration page I have "collect software file information" ticked on all the inventory scan types.
In the "software files" section I have "Collect .exe files" ticked, and have placed mdb in the additional extensions field. I also have all three (system, ancillary, other) file catagories ticked.
The inventory reports back all the exe files it can see on the test system I am running the inventory against (and yes I do have some .mdb files on there), but does not report back any mdb files.
Is there something I am missing in order for this to work?
Thanks
Gary

gazza,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

How to spool for a file inside a procedure

Hi,
I have a Procedure. Now that procedure writes some values into a file in /tmp directory (in Unix). Now there is a server program that reads this file does some manipulations and writest the output to a particular fiel(this file not the same as input file) in the same directory. My PL/SQL code or procedure has to keep looking for this file (output file generated by server program). How can I spool for a file in PL/SQL? Is it possible? Could you please put some light on this as of how to do it?
Thanks in advance

Hi,
I didnt get any exact way of spooling for the file. I tried to do this program for reading lines from a file using GET_LINE
create or replace procedure film as
log varchar2(300);
logfile UTL_FILE.FILE_TYPE;
begin
log := 'check_log';
logfile := utl_file.fopen('/tmp','check_log','R');
utl_file.get_line(logfile,log);
utl_file.fclose(logfile);
end;
show errors;
It gives me this error.BEGIN film; END;
ERROR at line 1:
ORA-06510: PL/SQL: unhandled user-defined exception
ORA-06512: at "SYS.UTL_FILE", line 101
ORA-06512: at "SYS.UTL_FILE", line 157
ORA-06512: at "DACSCAN.FILM", line 6
ORA-06512: at line 1
Could you please tell me where I am going wrong.
Thanks in advance

How to use lz4 compression for RAW file inside DNG ?

I know DNG supports zip compression. However, I want to use lz4 compression, as I am saving the file in realtime, and I cannot see any zip library matching the performance of lz4 for 16-bit RAW.
In my case this is 12-bit data with 4 bits set to zero.

Is there a study that compared the encoding speeds of the 3 algorithms available for RAW files ?
LZW, Packbits, Deflate.
I think Lossless JPEG can also work with 1 plane setting.
Also, looking at the dng_validate code, and the calls to relevant libraries, I see that the code seems to deal only with byte boundaries.
Are any of these algorithms optimized for 10,12,14-bit RAW data ?
I am trying to encode 203 MBps of data. Intel IPP would be an option, but its obviously nicer if DNG SDK can provide whats needed for free with some tweaking.

How to set option in Scanning for Reduced File Size

I am scanning from a Fujitsu 6230 scanner in Adobe Acrobat Standard 9.4.1. My scanning options are Color, 300DPI,Letter, High Quality, with Optimization options of Custom Settings of JPEG for Color/Grayscale. The scanned files are very large...1852KB per page. After using the Reduce File Size option and selecting Acrobat 8 and later, the file size is reduced to 187K. Is there a way to preset the Acrobat 8 or later setting....rather than having to do the two-step?
Also, if I use Fujitsu's scanning interface I get far higher quality pdf's, with small file sizes, and lower scanning resolution......but without the option to append to a pdf, an option I use frequently. Apparently their program for converting the scanned image to a pdf is more robust than Adobe's. Is there a way to use their image->pdf engine within Acrobat?

Hi Boatseller,
I will put this in simple way.
Can we set properties in biztalk wcf_custom adaptor like
1. <security authenticationMode="UserNameOverTransport"
2. enableUnsecuredResponse="True"
or
includeTimestamp="false"
3. <textMessageEncoding
messageVersion="Soap11"/>
<httpsTransport/>
I am unable to find these properties in BizTalk wcf_custom adaptor properties. It will be great help if you could guide me in right direction . My problem is to receive response message into orchestration which is not having header. But the response is coming
from web service. I saw that in fiddler.
Also, If there is any steps to make these properties available in machine config, please share
Thanks in advance
Vivek

Scanning for all files in a directory

I built a very basic flash movie of 6 pictures scrolling
across a page for a client. You can view it at the link below.
Fazio Realty
I made most of the content on the site updatable through a
protected Admin section, but now he wants to be able to update the
images in the flash also. I am pretty sure this is possible but
have no idea where to start, if anyone could point me in the right
direction that would be greatly appreciated. Thanks in
advance.

It's totally possible. There are many ways to do it as well,
all from simple to complex.
One way that shouldn't be too difficult, you could create a
movieclip with presized movieclips inside it animating just like
the pictures you have on there now do. On each of the movieclips,
load one of the external jpg files into it. You could use
loadVariables or a movieClipLoader to do that.
Also, you might want to consider upping the frame rate on
your movie.. It is very jerky.

Scanning for chared files on windows computers

hi there,
i hope you can help, i recently sitched to an iMac g5 isight and i love it, but i am a university student, and when i had a windows pc i used to have share scan to search for all shared files on peoples computers on the network. The windows package was called ShareScan.
Is there an OSX alternative to ShareScan??
Regards,
Matt

i meant shared files in the title, rather than chared

Scan for saved files

Windows XP
I copied my files from my Itunes folder on my desktop system to my laptop. I can see thr files thru explore, but I have to go and select each song and import them one by one. How might I scan the drive to mass import all the albums/ songs en masse? Thank you in advance.
Pat

Pat, If I understand correctly the songs are now all on your hard drive and you wish to add them to your iTunes library?
You do not have to do them one at a time. From your iTunes library, pull down the File menu and use "Add File to Library" and/or "Add Folder to Library." The latter goes thru a folder, including its subfolders, and adds all the songs it finds.

How to extend AVK to scan for other vendor-specific APIs?

All--
How do I extend AVK to scan for other vendor specific APIs.
I tried adding another <name> element underneath the
appropriate the <unsupported> tag in the asmt-config.xml file,
e.g.
<websphere50>
<supported>
</supported>
<unsupported>
<name>com.ibm.ws.activity.ActivityConstants</name>
.......... other <name> elements were left alone ..........
</unsupported>
</websphere50>
But when I scanned the source code it didn't find an import of that API.
Note: it did find an import of the APIs that were pre-defined in the asmt-
config file; just not the one that I added.
Is adding a <name> to the asmt-config.xml file the right approach?
If so, how does the SourceScan ant task know where to find the asmt-
config.xml file. Currently, I left it in the %JAVKE_HOME%/config folder.
Is that the right place for that file?
Any comments on how to extend AVK to scan for other vendor
specific APIs would be greatly appreciated.

Oops!
Its probably bad form to answer your own question, but after
sending out the original post, I treid:
1. opening a new shell
2. running the %JAVKE_HOME%/bin/javke_setenv.bat
3. then ran the "asant code-scan" from that shell and viola it worked ...
Sorry for any confusion.

IPad could not scan for wireless networks

My iPad 2 was bought in April 2011. And just a few hours ago it suddenly disconnected from my home WIFI.
I tried to reconnect it, but it either kept scanning the network or kept prompting the warning message "iPad could not scan for wireless networks".
My Macbook Pro, iPhone and another iPad 3 were all working fine with my two different WIFI points at home yet only my iPad 2 couldn't scan both WIFI at all.
I have tried to:
1. Reboot IOS (turn it off and on)
2. Take out sim card
3. Reset Network Settings
4 Reset All Settings
5. Restore iPad from iTune
I've called Apple, obviously they had no clues about this problem and they just adviced me to send in my iPad 2 for 1-to-1 change.
This seems to be a common unsolved issue for apple users. Has anyone solved this before?
Now I'm worrying will my iPad 3 get the same issue in future. it makes me quite frustrated

Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
Additional things to try.
Try this first. Turn Off your iPad. Then turn Off (disconnect power cord) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
Change the channel on your wireless router (Auto is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
Another thing to try - Go into your router security settings and change from WEP to WPA with AES.
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
If none of the above suggestions work, look at this link.
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

Scan to PDF files too large! - Why?? Solution for Windows - How about Mac? (HP-8630)

Scanning a document to a PDF file of reasonable size has been addressed many times - it is always an issue! My wife is a realtor and frequently needs to scan multiple page documents. I found an actual solution last night:
27 page letter-size B&W document - Scan to PDF on my HP-8630 AIO using HP software at 300dpi, small file size, BW: 27MB! Too big to email.
Solution (in Windows 7 at least), if you have Adobe Acrobat:
Open Adobe Acrobat, go to File Menu - Create - PDF from Scanner - Configure Presets. Select and configure "Black and White Document":
Select TWAIN device (NOT WIA) as the scanner; black and white, 300dpi, file size one notch to left (smaller) from center, check "optimize after scan". Select paper size and one- or two-sided scanning. Uncheck "make searchable". Save the preset. (The TWAIN driver was apparently installed with the HP installer, since I did not have to look for it.)
After placing pages in the Doc Feeder, go to File Menu, Create - PDF from Scanner - Black and White Document. Watch the magic!
File size 768k! Quality indistinguishable from the 27MB version, sharp and clear, all 27 pages! Really!
Using the HP software, using a lower resolution or sliding the file size slider to smaller makes a muddy scan, and the file is still huge compared to the Acrobat technique. MUCH worse quality than the Acrobat 768k version.
Interestingly, using Acrobat to open the 27MB scan and "PRINT" it to the PDF Printer reduced the size to 10MB, with no change in appearance. "Save as smaller PDF" did not reduce the size further.
What gives, HP?? What can Acrobat do to scan from your AIO that you can't do?
I tried on my Mac as well - we use both. No go. On Mac OSX 10.10.1 with latest HP drivers, Acrobat does not see any TWAIN or other driver from within the dialog box described above. Scanning from HP software again yields about 1MB per page.
Anyone know how to make Acrobat see the scanner on Mac?

Hi @JosephWit ,
I see by your post that you are having issues with the PDF scanning size being too big. I will do my best to assist you with this issue.
The drivers for 10.10 are installed by the Apple Updates. Did you install the 10.9 drivers or are did up run the Apple Updates to install the printer?
Uninstall the 10.9 printer software and run the Apple Updates to install the proper drivers. Then you can scan with the Apple Software.
Connect the printer to the Mac by a USB cable and run the Apple Updates to install the printer drivers.
Go to the Apple, About this Mac, click on the Overview tab and select Software Updates.
Go to the Apple, Printers and Scanners, delete the USB drivers and disconnect the USB cable.
Then add the wireless printer as a Bonjour printer if the printer is networked.
Click on the + sign, highlight the printer, below beside Use: make sure just the printer name is listed. (you might have to click on the drop down to select your printer from the list)
Here is a document for Scanning in OS X v10.10 Yosemite Without HP Software.
If you are having issues with Adobe, run the updates. Product updates.
If you need further assistance, just let me know.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

PDF SCANS ERROR MESSAGE: CAN'T "OPEN THE DEFAULT APP FOR THIS FILE TYPE" EG. PDF

OFFICEJET PRO 8600 PLUS , WIN 7, SCAN TO COMPUTER AS A PDF FILE. ERROR MESSAGE: "
CAN'T "OPEN THE DEFAULT APP FOR THIS FILE TYPE" EG. PDF

Hi @reddog2,
I would contact HP Cloud Services for assistance. Call 1-855-785-2777.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

I have Maverick 10.9.1 installed I scanned a photo on my HA D 110 series but it won't let me print or save it: An error has occurred saving the file because it could not be written to. Check the properties for the file to make sure it is not read-only.

I have Maverick 10.9.1 installed I scanned a photo on my HP D 110 series but it won't let me print or save it: An error has occurred saving the file because it could not be written to. Check the properties for the file to make sure it is not read-only.

Read the user manual that came w/the scanner and/or contact HP Support.
http://support.apple.com/kb/PH14141 OS X Mavericks: Reset the printing system
http://support.apple.com/kb/HT3669 Printer and scanner software available for download
A scanner driver you may wish to consider: VueScan Scanner Software

After downloading Maverick I cannot save or email scans from my HP L7780. I receive error message "An error has occurred saving the file because it could not be written to. Check the properties for the file to make sure it is not read-only. "

After downloading Maverick I cannot save or email scans from my HP L7780. I receive error message "An error has occurred saving the file because it could not be written to. Check the properties for the file to make sure it is not read-only.

Read the user manual that came w/the scanner and/or contact HP Support.
http://support.apple.com/kb/PH14141 OS X Mavericks: Reset the printing system
http://support.apple.com/kb/HT3669 Printer and scanner software available for download
A scanner driver you may wish to consider: VueScan Scanner Software

ESA scanning for a file inside of a zip inside of another zip.

Similar Messages

Maybe you are looking for