@@ -1,3 +1,8 @@

+Mon Apr 28 12:37:31 CEST 2008 (tk)

+----------------------------------

+  * libclamav/unzip.c: remove detection of Suspect.Zip and

+		       Exploit.Zip.ModifiedHeaders (bb#997)

+

 Thu Apr 24 17:44:38 MSD 2008 (tk)

 ---------------------------------

   * libclamav: scan for embedded PEs inside OLE2 files (bb#914)

@@ -387,25 +387,6 @@ static unsigned int lhdr(uint8_t *zip, uint32_t zsize, unsigned int *fu, unsigne

     zsize-=csize;

   }

-  if(ch && !LH_flen) {

-    cli_dbgmsg("cli_unzip: found noname file\n");

-    *ctx->virname = "Suspect.Zip";

-    *ret = CL_VIRUS;

-    return 0;

-  }

-  if(ch && !LH_usize && LH_crc32) {

-    cli_dbgmsg("Zip: Broken file or modified information in local header part of archive\n");

-    *ctx->virname = "Exploit.Zip.ModifiedHeaders";

-    * ret = CL_VIRUS;

-    return 0;

-  }

-  if(ch && !LH_csize && LH_usize) {

-    cli_dbgmsg("Zip: Malformed file (csize == 0 but usize != 0)\n");

-    *ctx->virname = "Suspect.Zip";

-    *ret = CL_VIRUS;

-    return 0;

-  }

-

   if(LH_flags & F_USEDD) {

     if(zsize<12) {

       cli_dbgmsg("cli_unzip: lh - data desc out of file\n");