On Mon, 18 Oct 2004 11:43:23 -0500
Robert Haas <[EMAIL PROTECTED]> wrote:

> On Sun, 2004-10-17 at 22:49, James Lick wrote:
> > (Regarding clam.exe not being detected as an attachment.)
> > 
> > Someone reported this same problem a few days ago to me as a
> > possible clamassassin bug.  I was able to verify the problem with an
> > attachment created with Mozilla 1.7.3 which was passed as "OK" by
> > ClamAV.  extracting the attachment to a file and scanning the
> > clam.exe file and it is detected correctly, so the file didn't get
> > corrupted along the line somewhere.  I hadn't looked into it enough
> > to report the bug yet, but something is definitely wrong in
> > detecting clam.exe as an attachment.
> 
> That is the exact issue I am seeing (even to the clamassassin, but
> I've ruled that out as being the problem). I thought perhaps there was
> an issue with how evolution was attaching the file, so I tried
> outlookE, Mozilla, and pine, all with the same results.
> 
> A hex dump of the temporary file that clamav created shows that there
> is a difference between it and the original. In addition the file
> sizes are off by one byte, 545 versus the original 544.

Please send the problematic mail file (in encrypted zip, pass: virus) to
[EMAIL PROTECTED] Thanks.

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Mon Oct 18 19:53:08 CEST 2004

Attachment: pgpzigxKQu5Gm.pgp
Description: PGP signature

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to