> But it is the the jpeg that contains the virus, so changing the jpeg will > remove > the virus.
If so, why does clamscan report "OK" when scanning? z.badjpeg: OK z.goodjpeg: Worm.Bagle.AC FOUND Both of these contain the Bagle attachment (Readme.cpl), but it is only found after replacing the bad jpeg (i.e., "z.goodjpeg"). Check the debug output when scanning the z.badjpeg to see my point regarding jpeg parsing (which I included in one of my previous posts). //D _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
