Criteria used to detect encrypted files or documents

Article:TECH159825  |  Created: 2011-05-11  |  Updated: 2011-12-06  |  Article URL http://www.symantec.com/docs/TECH159825
Article Type
Technical Solution


Subject

Issue



This document outlines the criteria used by Symantec Scan Engine 5.x to determine whether a document or file is encrypted.


Solution



An encrypted verdict may be returned by Scan Engine on files that belong to the following categories.

Document/File type Scan Engine verdict
Password-protected Microsoft Office documents Encrypted
Common password-protected compressed archives
(AMG, LHA, OLE1, RAR, TAR, ZIP)
Encrypted

MS Outlook 2007/2010 encrypted emails (EML)

Encrypted
PGP encrypted emails (EML) Not encrypted
MS Outlook 2007/2010 digitally signed emails (EML) Not encrypted
   

 

 




Article URL http://www.symantec.com/docs/TECH159825


Terms of use for this information are found in Legal Notices