Hi evrybody
I first posted this a week ago, but I still have not found a
solution.
Since v0.84, I've been receiving various obviously crafted mails
that contain viruses, but pass through clamav-milter ok. However, when I
save the mail and scan the mbox file with clamdscan (not clamscan)
"Worm.Bagz.D" is found.
When I submit the contaminated mailbox
(http://users.auth.gr/~apap/spurious-viral-mbox) to www.clamav.net, I get
the expected response "clamav already recognizes the content you submitted",
"there is no reason to resubmit it. "
It seems that when the crafted mail is sent directly to my mail
server (now sendmail 8.13.4, clamav-milter 0.85, ClamAV 0.85.1/882/Tue May
17 09:48:03 2005), the mail passes through. As I have found out, if it gets
relayed to another mail server with clamav, some how the virus is then
detected, but if the recipient is local, the viral mail gets through. It
seems that there is something strange in the original headers, that gets
cleared when passing through a mail server.
Here is the raw evidence that a mail that gets detected as viral by
clamdscan, passes through clamav-milter that uses the very same clamd, at
least at the first mail server in the path. Both clamdscan, and the mail
server clamav-milter use the very same clamd.
$ wget -q http://users.auth.gr/~apap/spurious-viral-mbox # Fetch a copy of my
viral mail
$ clamdscan spurious-viral-mbox # Checkit your self
/home/apap/spurious-viral-mbox: Worm.Bagz.D FOUND
$ /usr/sbin/sendmail -v [EMAIL PROTECTED] <spurious-viral-mbox # Try this if
you have sendmail
[EMAIL PROTECTED] Connecting to smtp.ccf.auth.gr via relay...
220 Sendmail ESMTP Server Ready ; Tue, 17 May 2005 16:53:47 +0300 (EEST)
>>> EHLO helios.ccf.auth.gr
250-olympos.ccf.auth.gr Hello helios.ccf.auth.gr [155.207.1.6], pleased to meet
you
>>> MAIL From:<[EMAIL PROTECTED]> SIZE=202598 BODY=8BITMIME
250 2.1.0 <[EMAIL PROTECTED]>... Sender ok
>>> RCPT To:<[EMAIL PROTECTED]>
>>> DATA
250 2.1.5 <[EMAIL PROTECTED]>... Recipient ok
354 Enter mail, end with "." on a line by itself
>>> .
250 2.0.0 j4HDrlkc007312 Message accepted for delivery
[EMAIL PROTECTED] Sent (j4HDrlkc007312 Message accepted for delivery)
Closing connection to smtp.ccf.auth.gr
>>> QUIT
221 2.0.0 olympos.ccf.auth.gr closing connection
--
Apostolis Papayanakis
[EMAIL PROTECTED], 2310-998416
On Wed, 11 May 2005, Apostolos Papayanakis wrote:
> Hi everybody,
>
> I've received more than twenty profoundly viral mails since last night.
> They passed without being stopped, through our sendmail Clamav (ClamAV
> 0.84/875/Tue May 10 14:27:59 2005+clamav-milter 0.84e). However if I save
> each of these viral mails in a seperate mbox, "clamdscan" with the same
> definitions can suddenly detect "Worm.Bagz.D" in them.
>
> It seems that clamav-milter cannot handle these mails correctly, and
> misses something while communicating (externally) with clamd. I should
> mention that the mbox contains an attachment BASE64 encoded in long lines
> o 2048 bytes(!), a mangled date header and a crafted filename with lots
> of spaces, eg: "help.doc .exe"
>
> I cannot submit the viral mbox on www.clamav.net, because it says that
> "the virus is already detected".
>
> Is this a wide-spread problem?
>
> Apostolis Papayanakis
>
> p.s. Here follows a part of the mailbox that passes through our mail server=
> ,
> and detected as "Worm.Bagz.D" from clamdscan:
> (">" is added at the start of each line to avoid being detected as "broken =
> executable" by clamd)
> ---------------------------------------------------------------------------=
> ----------------
> >From [EMAIL PROTECTED] Wed May 11 03:02:23 2005
> >Received: from 127.0.0.1 ([211.191.198.7])
> > by olympos.ccf.auth.gr (8.13.3/8.13.3) with ESMTP id j4B02EsG01374=
> 5
> > for [EMAIL PROTECTED]; Wed, 11 May 2005 03:02:1=
> 5 +0300 (EEST)
> >Message-Id: <[EMAIL PROTECTED]>
> >SUBJECT: text
> >FROM: [EMAIL PROTECTED]
> >TO: [EMAIL PROTECTED]
> >DATE: [[ =BC=F6, 11 5 2005 =BF=C0=C0=FC 9:02:24 ]]
> >MIME-Version: 1.0
> >Content-Type: multipart/mixed; boundary=3D"--------bound--"
> >X-Virus-Scanned: ClamAV version 0.84, clamav-milter version 0.84e on antiv=
> irus1.ccf.auth.gr
> >X-Virus-Status: Clean
> >X-Spam-Checker-Version: SpamAssassin 3.0.2-gr1 (2004-11-16) on
> > helios.ccf.auth.gr
> >X-Spam-Level: *****
> >X-Spam-Status: No, score=3D5.7 required=3D7.0 tests=3DBAYES_50,FORGED_HOTM=
> AIL_RCVD2,
> > HEAD_ILLEGAL_CHARS,INVALID_DATE,MSGID_FROM_MTA_ID,NO_REAL_NAME,
> > RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL autolearn=3Dno version=3D3.0.2=
> -gr1
> >Status: R
> >Content-Length: 207546
> >X-Keywords:
> >
> >----------bound--
> >Content-Type: text/plain; charset=3Dus-ascii
> >Content-Transfer-Encoding: 7bit
> >
> >Hello,
> >What version of windows you are using?
> >This last document I received from you came out weird.
> >Please see the attached word file and resend the file to me.
> >Many thanks,
> >User
> >
> >----------bound--
> >Content-Type: application/x-msdownload; name=3D"help.doc =
> .exe"
> >Content-Transfer-Encoding: base64
> >Content-Disposition: attachment; filename=3D"help.doc =
> .exe"
> >
> >TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TI=
> G1vZGUuDQ0KJAAAAAAAAABGXurlAj+EtgI/hLYCP4S2gSOKthI/hLZtII+2BD+Etm0gjrY/P4S2=
> gTfZtgU/hLYCP4W2Pj+EtgQckrYAP4S2xTmCtgM/hLZSaWNoAj+EtgAAAAAAAAAAAAAAAAAAAAB=
> QRQAATAEDAObVd0EAAAAAAAAAAOAADwELAQYAAGACAAAQAAAAkAAAoPECAACgAAAAAAMAAABAAA=
> AQAAAAAgAABAAAAAAAAAAEAAAAAAAAAAAQAwAAEAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAA=
> AAAABAAAAAAAAAAAAAAAKQDAwDgAAAAAAADAKQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFVQWDAAAAAAAJAAAAAQAAAAAAAAAAQAAAAAAAAAAAAAAA=
> AAAIAAAOBVUFgxAAAAAABgAgAAoAAAAFQCAAAEAAAAAAAAAAAAAAAAAABAAADgLnJzcmMAAAAAE=
> AAAAAADAAAGAAAAWAIAAAAAAAAAAAAAAAAAQAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMS4yNQBVUFghDAkCCq/DZRXqhlUzL9UCA=
> JlRAgAAwAIAJgUAB/+9+f9Vi+xq/2jgbUAAZKEAUGSJJQdRgeygBLX//S9TVleJZfDHRfwTagCL=
> RQhQBfwuWPcBaA+ABgTPAGiMr0K93969yIJCHP8V3HBQiUXoaIA2rpntkwGLTehRG+AyXIO82f6=
> Nlej7//9SEQS/vIJCg/9g///J/zPA8q730Sv5i/eL2Yv6EIPH/4vLwen/+f7tAvOlBoPhA/OkaL=
> gzhVDoBQAFedvt2/2DxAiJheQOi40FUWbcAXcBe1527WhAgGAgBE8Qi5VSDmCz2bID+QSJQ4n5O=
> UHIrCYARFxC3Vv5CLkgAF2NvVgV89iXdIerO5hYiz1ImWy7QchYXQLsilA5M1vsBQtU9o1s5oTt=
> UYdUhwAe4NO9Efaoz+k4WPt/drIZRezLi0IMg+AQhcB1M/aHba0F8QGw3OYRhGdse/UsUBaNUQx=
> hLyQ8670OJwvxbG2McZx4BJCI2zdjg2XUr9jrBrjPEgzDsWHYHKkM/wlq9I7zv7vJDQAAX15bi+=
> VdwhAAzO9mmo3/g+wcahyNReRQjgQIsdFt7u10BW/o6wI4K8MkUX/ht9/5i30MD699sF0Ii8+FN=
> 338iU0Iddz+77YHIumV3ot1FGb3RgwMAXQdRhjY8m8vARTrDHwUABAAAOsDCBv3/90yKgRcIzvI=
> i/lyAov4V/82U9T/7e1/DWw
> >pfQgpfgQBPtwMA99o/OtLO00Uci7+rf3bg31Ci8F0CTPS918IK8JQU/92EJf+zu0xC3YpSTaD+=
> P90NymHA9ht993u6xhWGAqdEVl0KIgDhkP/ebcZfnOKRQgAD4V2CNQQ/7bdLXzJw4NODGEEBSCL=
> x1srPri1/7deDOvlVot0JAhXg88mrKhAtt8vXAKDyEg6qIN0NFgSIx742Uae7QcRvYERCn0lz/s=
> fum0SMRyNC6EQoYNmHABZWDYSDFsGDG09ayDcDIY5PgeL3z23Qa7kBUAHi6OB4U/+hNsIAQh0KT=
> siO9iL+3UIPwgTCj49OivfAX0Ib7P28utGO11GhcmOtzRZdXmz/eQPSXQNi8P7K/rrQvtfPpyzz=
> RRLRwEr2DvHr8Ddw3I+hSmuVg++Bkg29z3C9VlaLv9FpEulWX+QhQ33p50y22FQvF2jsFt9Zccr=
> dKFt2jVf50QXJw0Bwylpu9kxbBAD8hW3w2pADpNgdq8MA5EFWTxF7B/fbpzADHH8ZIsdxIsDZKM=
> H8G38XYpdDItj/Itt6OB4wu8Fa7/qWFmHBCQNBkFC6aZtAs9C+BP6FUAwbmfY2pMC/AJtXchim9=
> 0a24tAMP2sZ0EELVtSsNh2+IlpiXJcMNYWXDcET/yNvVAAQ2y/2DYUAhBPTBefuiDdpHYyHmoFQ=
> TUUN/fRfsVl7FWU9BmJ8KsN9paWFkBH+Nqg7NxtVm5n7P/gUBhRWn0H6+5UH5yLo+z3wclT/Ny7=
> bc1Rx4Fwe3AI0Ac3N9jAg3g0rnjYAHMdhm9v3IQXQDRh4DoFNFeWZeQc6K4oXdNsG9kAA/T4/C7=
> wlsPemlaJEolt+J3Y2P04C0n7zNNF0Fu77bIFENSNCFAP/zBJpFyWbRMBWVlNzH10F3aShSS7Vt=
> jrCS3DOxzC2MzMZLNfOhYwuEWQP2b0D2sv8O6tx0AkbClY600EEDc7Y5vrFAUQ/wrHPyyEAnN4J=
> AB1C+r3jzHGdVjOMhyLayD/YxhOKrVhOXTjqLLQbttmqXh3IV9Mxok0f6nZ3pl8OYP+OwUgFU0Q=
> To0Ett/3t/Y5TIMEBi4FO0gIfgUeDPVNm+PnHqM0R33K/y4UZv8L7UaJMQVxATtHDHcEO/B2RwK=
> TueZDd0HvVdQCh1E4jBhwkV2qHLqNf8OLTCQE95IG/LgBdV/aNg1EJKJUOYkCuAMQw118g84+Eh=
> BH/miUGLr/W3BBmjUAGQVYLywtuUIWpr07XiS3rf0LHo00dosMs4lZ30gXfLPt3/eFBCESaAEBL=
> bN9CUb/VAgsOdP768NkjwVDiozHwK3h/SzDDYF5BGhvUfeDu1f4Ugw5UQgem4pRu9COf/sItusK=
> COxLAkMEiWsMWf3ihNpbwmdh6PQ0OxHaGAlmq1hix2+5jeg9PCE3itSJFcxH7scCDfsF/4ANyA3=
> uz3aBwREDygrE6BCjwAdgw/XXM/bsKspZXwocZtst/Al5WYn8CCeqTTh37MfioxjFbCZ4o5CvCS=
> QrBIuN7WEjcpCUK9C7pFpQbnymNBYazZz26Q0aL5IGD7fXxWoKWOviAma7nFZWIjAS0PVaaPruP=
> UWgUD7BmotjCQqNT1zKmFDDIZb5uMfo/u3HdZge0oM9mHIBRCwIcPR+XeIECEFo0wLBhjBnKC8k=
> WSX+QQy6QHXDo5+DD4TEpX/LBneoQLwHAnQKDMXtBjtoGE8LcUhmqQML7R92DXUJFi2UWesFNIY=
> GAxLbAu0YAghDifw/MAZUbPpni1YM9sKCdTRealsbcxAv+RBe+cH/b7v4N9zhH4s8vQDE5jzPRr=
> +Yg629/W8Jik8EX4DhgoD5LQaAznY4rYNW6IF+GFiGW05Ejtzg7cEIdATFBHXERhgOSIa+xO9nD=
> 7YBQYkOEPfYG8AWNV/iAtAQCWeDZgQAXjQutGepDFPfvlc7v8T/HzeqD4PFkMaD5h/B+AXB5gON=
> sP3Yr2OGiwQGA8aKUASvASUTL7cHnia0YnjtrbVobp3KFwJ1YgR1+9L/SHQdikAFPAp0FpoQiAe=
> LQk8BDCz8s7T4xkQwBQrx9D
> >+2uCzQFmYQNDD9SG/QbEd1OglEaoQ7wXXBjNHwFccFtJcJfrhi4yCxsA1kMW2+DWcC8v8W+y5y=
> WRdji1X0AVX4jUwwBIpv8cT2BKiAoPgg0saAPwoDXy/xdQQMBBQk+4jBi/gCm4P2EAPIZALuywS=
> V2Gw/EIoAPBozrjwNw7nbX7u1R/8TWipJOcRzGCHu325LvzhIBoMIAutexgcNR0TsvLnZ63PLK9=
> T/agHQtdBNBgoJRyL0zRfctkJBHvacHxOKRf8XKCzxd0aLC0eIRDEF9DtHDNy2Fy+Aff9jBRYK6=
> yN+jmeVsZQt2DIZdAQ6ajv3d7+SD4KhchB71+gaXXTzBpLkAogGK0ZY6LZF6viu+OuBJQQMS3g3=
> AEjy6zrQYDhX8gkQdrX5X1hG0dY7/nYIO/gPgnj3x2/cVOPgVcKD4gOUCHIpvx38Usr/JJW4Hsf=
> HuhyD6eWt0NQEcmYDRheF0B26p2tuHo3IkAdM4BMM8YW26wgwAyPRn1GKRgGIZWtua+gFAlYIWc=
> ZbdpKxx1zMjUkrJUmeZRkBAgKmA/m6s5AjRiFHP4yapum6rwacA5SMhHzp/q9pdGy/RI7kiUSP5=
> Afopmmapujs7PDwmqZpmvT0+Pj8/CH8gQ01jSsD8AP4CYPXdN//8NAD3PARjDawt3BeX16QnQv5=
> JAQXbBGjDaAtDDMKK8kxZ/aSQdj3/H8kDf3jtQyf3fx3UCD32WXffE4m4e+P+StYHzNd94sskGg=
> LiAOwbfm6W2EDOm8DTlhPVraXMOwtSx+j7rIB+W4C7wIpjJAnK1sS3iSrLQOu7sLMxptaWwQGmq=
> ZpugwDFBwkLDTTNCNsRyCXHBwYTdM0TRgUFBAQDDRN0zQMCAgEBLruhIUfYAVoA3jBuSVsjCCXt=
> 7WH2EKYLQ+DE+BFQhi3q/BW6X8nhfZ0WqHkw1GLA3UWGnxvfv8vIVZ0NlALTFIFF2itvhoIJo1H=
> gN+tpwP8UCI5hjkRUNDNN0IR/BLd6w9Wbs2W20E14E4rTF5oU1XNE/guWHwkFDs9j4YAxwaC3MC=
> L946D5h+YaneJWUwpaVdNPtT2trXHJjyD/xAm/34WagIWWx5rKLToH1k7xRwrwIRsPVlQo1CLoL=
> 2NdXftHVpYWYBkWQJPYFk87VVk6xV0gMQjrFBdWx842GCB+qiGGe1s0f4Dk2aBZgz3+zoTBoVZB=
> xuKCI1eKkMQwH0SIhKIWREvKPQPXLiT9kYNQG0GrcGTLT8RtyK5uH+boQQYUzsMM9tXaa1EC1qa=
> WAnnv4ltiTdzCPIxZ4s+K/iF//5+CfB+JldQXTvHdQ6YgHQOGGATrWWa6wcjvZ1wC/T/MAWYX4v=
> DHJoVDGQmjtX4ht9a1WMz/zk1wJV+TaGos5uJGz79sL04i0hm4zDZcIuFg54QMQ9QeBHobVt6Hx=
> 1D6xoVtRMhAmwKxf5lGnUCC/hGO0zxhwqwxThwdKDaFv9OA4hT0F4QqIJd/bYzyPPr1xajqBB0J=
> f6xF9sETggk/svFixRYOkjCZQxH7/Xebn9YdiKB/uilZnQIBwimQtHcgKZ+U4pAIQe84IBgkfAv=
> V3RkBLftIDCNSDkOWBhJ1OEVvhxOBH4QPDM6EK19wVQtM4P7/4Swy5Fjsc74kwSFBMi4NhqXPvZ=
> A2HQNa8VTuFE3DKlZin+ICC6sqdAvVANfUjmNQ6ENn1/chPtE6ENNWSVl6whER+2zOv0UgewU3c=
> XmUuH0UzsNBJMGeQGLSKzkwYvx8JETLQymV7eMANkeLDYC8CgVsqihDOg2SHZXUaC1xreA1lffW=
> VXBkxBBfbi8Iz7ihufv7EZN/CtNceuaaD/8KQr/H4oJbI23tm8KVAnwxgCh30DeEf9ug42VKSvK=
> gfnJfMyL+GexMMw7VxcNVzZCHBYWVOVDcnajRIuroJp8CwnbblG2ZEU+coq5ixO01MzC+ouRRV9=
> 0SRcuCFg5IXVMb6NvwaTvf9Ovtc/rx41cNgnaTfTbCWQLuKyLztGJCKcsnKVZT7NR0T0/araLFo=
> YMAdr8zf6r2+c5oXUcPesWn
> >...
> >... (approx 100 long encoded lines skipped)
> >...
> >AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAMAAAAgAACADgAAAGAAAIAAAAAAA=
> AAAAAAAAAAAAAEAAQAAADgAAIAAAAAAAAAAAAAAAAAAAAEAGQQAAFAAAACkAAMA6AIAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAABAGUAAAB4AACAAAAAAAAAAAAAAAAAAAABABkEAACQAAAAkAMDABQ=
> AAAAAAAAAAAAAAKDQAgAoAAAAIAAAAEAAAAABAAQAAAAAAIACAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAMDAwACAgIAAAAD/AAD/AAAA//8A/wAAAP8A/wD//=
> wAA////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAwMDAwMDAwMDAwMDAAAAM=
> DAwMDAwMDAwMDAwMDAAAwMDAwMDAwMDAwMDAwMAAAAwP//////////////wMAADAz//////////=
> ////wwAAADA///////////////AwAAMDP/8DAf/DAx/////DAAAAMD/8MDA/8DAz////8DAAAwM=
> //wMDH8MDAf///8MAAAAwP/wwMCPwMDA////wMAADAz//AwMDwwMDH///wwAAADA//DAwMDAwMD=
> P///AwAAMDP/8DAwMDAwMB///DAAAAMD/8MDAwMDAwMD//8DAAAwM//wMDwwMDAwMf/8MAAAAwP=
> /wwM+AwMDPwM//wMAADAz//AwPfAwMD3wH/wwAAADA//DAz/DAwM/wwP/AwAAMDP/8DA/4DAwP/=
> Ax/DAAAAMDwwMDAx8DAz8DAwMDAAAwM/AwMDA8MDA8MDAwMAAAAwP//////////////wMAADAz/=
> /////////////wwAAADA///////////////AwAAMDP//////////////DAAAAMDAwMDAwMDAwMD=
> AwMDAAAwMDAwMDAwMDAwMDAwMAAAAwMDAwMDAwMDAwMDAwMAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAA///////////AAAADwAAAA8AAAAPAAAADwAAAA8AAAAPAAAADwAAAA8AAAAP=
> AAAADwAAAA8AAAAPAAAADwAAAA8AAAAPAAAADwAAAA8AAAAPAAAADwAAAA8AAAAPAAAADwAAAA8=
> AAAAPAAAADwAAAA8AAAAPAAAAD//////////+I0wIAAAABAAEAICAQAAEABADoAgAAAQAAAAAAA=
> AAAAAAAAAAUBAMA9AMDAAAAAAAAAAAAAAAAACEEAwAEBAMAAAAAAAAAAAAAAAAALQQDAAwEAwAA=
> AAAAAAAAAAAAAAAAAAAAAAAAADgEAwBGBAMAVgQDAAAAAABkBAMAAAAAAHQEAwAAAAAAS0VSTkV=
> MMzIuRExMAFNIRUxMMzIuZGxsAFVTRVIzMi5kbGwAAABMb2FkTGlicmFyeUEAAEdldFByb2NBZG=
> RyZXNzAABFeGl0UHJvY2VzcwAAAFNoZWxsRXhlY3V0ZUEAAABTZXRXaW5kb3dQb3MAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAA
> >AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=3D=3D
> >----------bound--
> >
> >----------bound----
>
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
