On Mon, 18 Oct 2004 11:43:23 -0500 Robert Haas <[EMAIL PROTECTED]> wrote:
> On Sun, 2004-10-17 at 22:49, James Lick wrote: > > (Regarding clam.exe not being detected as an attachment.) > > > > Someone reported this same problem a few days ago to me as a > > possible clamassassin bug. I was able to verify the problem with an > > attachment created with Mozilla 1.7.3 which was passed as "OK" by > > ClamAV. extracting the attachment to a file and scanning the > > clam.exe file and it is detected correctly, so the file didn't get > > corrupted along the line somewhere. I hadn't looked into it enough > > to report the bug yet, but something is definitely wrong in > > detecting clam.exe as an attachment. > > That is the exact issue I am seeing (even to the clamassassin, but > I've ruled that out as being the problem). I thought perhaps there was > an issue with how evolution was attaching the file, so I tried > outlookE, Mozilla, and pine, all with the same results. > > A hex dump of the temporary file that clamav created shows that there > is a difference between it and the original. In addition the file > sizes are off by one byte, 545 versus the original 544. Please send the problematic mail file (in encrypted zip, pass: virus) to [EMAIL PROTECTED] Thanks. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Oct 18 19:53:08 CEST 2004
pgpzigxKQu5Gm.pgp
Description: PGP signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users