Following a Mimedefang post about virus writers possibly renaming Zip files to .txt and asking the users to rename the file I decided to test if Clam would pick it up. I renamed a Messages.zip file, that was picked up as Worm.Bagle.Gen-zippwd, to Messages.txt. If I scan the file with clamscan --unzip Message.txt it says the file is infected.
But if I send it through sendmail, with it deposited into a maildir folder, then scan it with clamscan --unzip --mbox it shows it as ok. I can scan other emails in the same maildir folder and they are picked up as Worm.Bagle.Gen-zippwd when the extension has a .zip. I have also saved the attachment and ran clamscan --unzip Messages.txt and it picks up the virus so I know it's not getting corrupted. Is this a bug? I'm using clamscan / ClamAV version devel-20040304. Brett ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
