On Thu, 05 Feb 2004 at 10:07:24 +0100, Kristof Hardy wrote: > > >Interesting. Can you make the .msg file available online? I'd like too > >see it. > > Thanks, it's available at http://pot.catsanddogs.com/~kristof/40820.msg >
Clamscan doesn't find a virus because this file is not in the standard email message format. These headers are guilty: P I 04-02-2004 16:35:40 0000 ____ ____ <[EMAIL PROTECTED]> R W 04-02-2004 16:35:40 0000 ____ _FY_ <[EMAIL PROTECTED]> O L and then standard headers follow: Received: by mail.area013.be (CommuniGate Pro PIPE 4.1.4) with PIPE id 4033392; Wed, 04 Feb 2004 17:35:40 +0100 After I removed first 4 lines: $ clamscan --mbox 40820.msg 40820.msg: Worm.SCO.A FOUND -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
