| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
| AntiVirus Exclusion MQ Files |
« View previous topic :: View next topic » |
| Author |
Message
|
| gbaddeley |
 Posted: Sun Jan 20, 2013 2:37 pm Post subject: |
 |
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
Hi Jeff,
| mqjeff wrote: |
| I was talking about the chance that a random section of a random part of a q file would contain the same set of bytes that matched the signature of a virus exec. |
I'd say the chance is very low, otherwise there would be a significant number of false positives.
| Quote: |
| In either situation, one *still* does not want one's virus scanner program to remove any section of a q storage file, there by corrupting the queue and damaging any remaining messages on the queue. |
True. I thought virus scanners work by quarantining entire files rather than portions of them, or only report a virus match and not automatically move the file.
_________________
Glenn |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Sun Jan 20, 2013 2:57 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9475
Location: US: west coast, almost. Otherwise, enroute.
|
Which antivirus program? The free kind? The industry-standard kind? What options?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Jan 21, 2013 7:19 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| gbaddeley wrote: |
Hi Jeff,
| mqjeff wrote: |
| I was talking about the chance that a random section of a random part of a q file would contain the same set of bytes that matched the signature of a virus exec. |
I'd say the chance is very low, otherwise there would be a significant number of false positives. |
I'd suggest that they use a significantly larger set of metrics to determine if a specific file might contain a virus in the first place.
I'd suggest that I do not consider those metrics reliable in the case of files of unknown type that they have not specifically been told about - for example files named 'q'.
It's great if you've gotten away with it.
I don't trust it, and do not recommend that anyone trust it without realistic testing. |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
