-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello 

I have a similar problem with my KMail mbox files. Since my recent post ("What 
should --mbox do?"), I have received a virus attachment into my "Family Mail" 
mbox file. If I run this:

/usr/local/bin/clamdscan --mbox  /home/steve/Mail

The report is:

/home/steve/Mail/Family Mail: Exploit.IFrame.Gen FOUND

But if I detach the virus and check it with clamdscan without the mbox option, 
I get this more informative report:

/home/steve/KDesktop/Click: Worm.BugBear.B FOUND

(I suppose I do not know that the Exploit.IFrame.Gen report is actually 
anything to to do with Worm.BugBear.B report. It could be a coincidence. I 
have hadthat report for various respectable web sites in mny browser cache 
too.)

The "Family Mail" file starts with:

- From [EMAIL PROTECTED] Wed May 22 18:09:41 2002

This seems to be the format expected?

Steve
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/W6wL94mqX5AIfgARAoOLAKCBj6oRRfyCT4bIvzSIYD0Lgqz0igCfRh3H
D6dE0m9rGvhDTaAY35MSsog=
=wTr/
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to