http://msdn.microsoft.com/en-us/library/ff385210.aspx http://msdn.microsoft.com/en-us/library/ff385210.aspx

Are there any plans to add PST support to ClamWin?

I think is not so safe to mess with pst files directly especially if outlook is accessing it, some tools already have some handling of such files
but the support is rather than complete. Perhaps ClamWin comes with an outlook plugin

There is the possibility to first make a copy of the PST file using the Volume Shadow Service.

http://blogs.msdn.com/adioltean/archive/2005/01/05/346793.aspx http://blogs.msdn.com/adioltean/archive/2005/01/05/346793.aspx

Another possibility is to do the scan offline, or to simply close Outlook before scanning.

I'm sure other AV vendors are racing to get this support into their products.

I doubt a commercial av scans directly pst files, most probably they are using office api to open contents, but I don't known if it's possible and how
to do it as standalone app, I suppose you are asking this because you have something linke users pst files on a shared server, right?
Otherwise why not to use clamwin outlook plugin?

"I doubt a commercial av scans directly pst files".

That's because the PST specification has just been published.


"Otherwise why not to use clamwin outlook plugin?"

Because .pst files are skipped when running a scan - the Outlook plugin is only relevant when opening attachments.


Do you want Clamwin to scan archives (as it does)? Sure you do.

Do you want Clamwin to scan your Outlook databases? Sure you do.

Are the PST files executable--can they be used to perform malicious actions?

Regards,

I think the only relevant data to scan in a pst are attachment, anyway adding a format scanner from scratch is not an easy matter, and maybe the code should be directly in clamav engine
rather than a windows specific feature, perhaps with open specs we can hope in a top level library to handle pst

I spend a lot of time dealing with compromised or broken systems from within Windows PE. As yet, i haven't tried running Clamwin in Win PE but this might be a useful addition to the toolkit. Btw, has anyone tried this?

Anyway, it would be interesting to have Clamwin be capable of scanning a .pst from an offline environment.

sherpya, thanks for considering the possibility of adding .pst scanning to Clamwin.

I'm the author of Windows XPE plugin for bartbe I also made a clamwin plugin, but it is outdate, unfortunately I had no time to follow the winpe project
mainly for lack of interest since right now linux live cd (I use sysrescd) are able to read/write ntfs now