At 11:19 AM 6/26/2007, Daniel J McDonald wrote: >I think this message is just spam, and not something nefarious, but >amavisd flagged it as BANNED due to an exe. Can anyone tell if this >really was malware? > > >X-Envelope-To: <[EMAIL PROTECTED]> >X-Quarantine-ID: <lGMnl3xEtzBg> >X-Amavis-Alert: BANNED, message contains part: text/plain,.exe ... >The file command does evaluate the text as executable: >[EMAIL PROTECTED] ~]$ file foo2.txt >foo2.txt: COM executable for DOS
*probably* just a false-positive of file(1) matching on the funny character set. -- Noel Jones ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
