Background - Daniel has emailed the files to me ] On Monday 21 Mar 2005 09:43, you wrote: > On Mon, 21 Mar 2005, Nigel Horne wrote: > > > Date: Mon, 21 Mar 2005 08:47:12 +0000 > > From: Nigel Horne <[EMAIL PROTECTED]> > > Subject: Re: [Clamav-users] Attachment not identified as attachment/bad > > jpeg > > > > Send me a copy of the mail which is incorrectly scanned and I'll look into > > it. > > Attached is a bad jpeg and a good jpeg-version of the mail file in > question. > > The magic word for the archive is "evil". > > Note that both contain the actual virus.
The me2.jpeg files are different, a quick look with vi will show this. Using vi I yanked the base64 me2.jpeg lines (about 1420 of them) from the 'good' to the 'bad' file and now the virus is found in both. z.badjpeg: Worm.Bagle.AC FOUND z.goodjpeg: Worm.Bagle.AC FOUND ----------- SCAN SUMMARY ----------- Known viruses: 31659 Engine version: devel-20050318 Scanned directories: 0 Scanned files: 2 Infected files: 2 Data scanned: 0.16 MB Time: 0.571 sec (0 m 0 s) > //Daniel -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
