On Thursday 20 May 2004 9:13 pm, Jim Maul wrote: > Exactly, and after some more playing around, i found that i dont even have > to remove ALL of those lines. I can leave them all in except the first > line which was "-----Original Message-----" > > If i remove that line, clamscan finds the virus in the message, if i put > that line back in the message, clamscan doesnt find the virus.
That looks suspiciously to me like a MIME boundary marker (although I agree that in this context it isn't). I wonder if ClamAV is misinterpreting it in this way, and therefore doesn't see the real boundary markers for the infected attachment? Regards, Antony. -- The lottery is a tax for people who can't do maths. Please reply to the list; please don't CC me. ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users