clamscan is finding the SCO.a fine after the attachment has been decoded out of an email:
/var/spool/qmailscan/quarantine/new/body.pif: Worm.SCO.A FOUND but it will not find it while it is still in the body of the attachment mime encoded. /var/spool/qmailscan/quarantine/new/prupref-mailgate10751714524615485: OK Content-Type: application/octet-stream; name="body.pif" Content-Transfer-Encoding: base64 Content-Description: body.pif Content-Disposition: attachment; filename="body.pif" TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Any suggestions? It finds other virii fine when they are still encoded, maybe the definitions need to be added for its MIME version? thanks ------------------------------------------- Chris McKeever If you want to reply directly to me, please use cgmckeever--at--prupref---dot---com http://www.prupref.com ---- Prudential Preferred Properties www.prupref.com ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
