ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Outlook Personal Folders File Format (.pst) Structure Spec.
drewfus


Joined: 21 Apr 2010
Posts: 4
Location: Australia
Reply with quote
http://msdn.microsoft.com/en-us/library/ff385210.aspx http://msdn.microsoft.com/en-us/library/ff385210.aspx
Quote:
This document specifies the Outlook Personal Folders File Format, and provides the necessary technical information required to read and write the contents of a Personal Folders File (PST). This document also specifies the minimum requirements for a PST file to be recognizable as valid in order for implementers to create PST files that can be mounted and used by other implementations of the protocol.

Are there any plans to add PST support to ClamWin?
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 894
Location: Italy
Reply with quote
I think is not so safe to mess with pst files directly especially if outlook is accessing it, some tools already have some handling of such files
but the support is rather than complete. Perhaps ClamWin comes with an outlook plugin
View user's profileSend private message
drewfus


Joined: 21 Apr 2010
Posts: 4
Location: Australia
Reply with quote
There is the possibility to first make a copy of the PST file using the Volume Shadow Service.

http://blogs.msdn.com/adioltean/archive/2005/01/05/346793.aspx http://blogs.msdn.com/adioltean/archive/2005/01/05/346793.aspx

Another possibility is to do the scan offline, or to simply close Outlook before scanning.

I'm sure other AV vendors are racing to get this support into their products.
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 894
Location: Italy
Reply with quote
I doubt a commercial av scans directly pst files, most probably they are using office api to open contents, but I don't known if it's possible and how
to do it as standalone app, I suppose you are asking this because you have something linke users pst files on a shared server, right?
Otherwise why not to use clamwin outlook plugin?
View user's profileSend private message
drewfus


Joined: 21 Apr 2010
Posts: 4
Location: Australia
Reply with quote
"I doubt a commercial av scans directly pst files".

That's because the PST specification has just been published.


"Otherwise why not to use clamwin outlook plugin?"

Because .pst files are skipped when running a scan - the Outlook plugin is only relevant when opening attachments.


Do you want Clamwin to scan archives (as it does)? Sure you do.

Do you want Clamwin to scan your Outlook databases? Sure you do.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4191
Location: USA
Reply with quote
Are the PST files executable--can they be used to perform malicious actions?

Regards,
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 894
Location: Italy
Reply with quote
I think the only relevant data to scan in a pst are attachment, anyway adding a format scanner from scratch is not an easy matter, and maybe the code should be directly in clamav engine
rather than a windows specific feature, perhaps with open specs we can hope in a top level library to handle pst
View user's profileSend private message
drewfus


Joined: 21 Apr 2010
Posts: 4
Location: Australia
Reply with quote
I spend a lot of time dealing with compromised or broken systems from within Windows PE. As yet, i haven't tried running Clamwin in Win PE but this might be a useful addition to the toolkit. Btw, has anyone tried this?

Anyway, it would be interesting to have Clamwin be capable of scanning a .pst from an offline environment.

sherpya, thanks for considering the possibility of adding .pst scanning to Clamwin.
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 894
Location: Italy
Reply with quote
I'm the author of Windows XPE plugin for bartbe I also made a clamwin plugin, but it is outdate, unfortunately I had no time to follow the winpe project
mainly for lack of interest since right now linux live cd (I use sysrescd) are able to read/write ntfs now
View user's profileSend private message
Outlook Personal Folders File Format (.pst) Structure Spec.
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic