Suntower West wrote: > Hi, > > I'm getting a positive for this in a Eudora mailbox (which is > basically just an ASCII file.) However, when I scan the same file > with Comodo it comes up as clean. > > 1. Is this a false positive? > > 2. If not, then, is there a way to locate the bad code within the > text and remove it without removing the entire file (which I need!) > > TIA,
It decodes to "/.www.paypal.com/" which is normally an unusual construct for a URL unless you post a lot of regex patterns in email. Does the part between quotes exist intentionally in your message? dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
