Peter Peltonen wrote:
On 8/21/06, Jake Vickers <[EMAIL PROTECTED]> wrote:
The badmimetypes and badloadertypes came from the warlord package that
has been part of the package for a while now. The new version of QMT has
a modified version of simcontrol, which also offers some of the same
features as warlord. Since warlord offers some features not included
with simscan, it has been left it the package. It is better at catching
known virus signatures (since it looks at the actual MIME encoding).
Since it was a new addition (simscan), the functionality of the two
where they overlap has not been modified as of yet.
Ok, thanks for the explanation. Badmimetypes would be easier to use if
in the contronl file there would be clearly explained what mimetype is
what. The default one says the following:
--<snip>--
TVqQAAMAA
TVpQAAIAA
TVpAALQAc
TVpyAXkAX
TVrmAU4AA
TVrhARwAk
TVoFAQUAA
TVoAAAQAA
TVoIARMAA
TVouARsAA
TVrQAT8AA
TVrvAEQAe
# MyDoom (*.zip)
# UEsDBAoAA
# *.zip
# UEsDBAkAA
# *.z (gnu-zip)
# H4sIADWWb
# double Base 64 Windows Executable
VFZxUUFBT
# triple Base 64 Windows Executable
VkZaeFVVR
# Pif File
TVoAAAEAA
# Bagle
ZGltIGZpb
--</snip>--
What are the mimetypes in the beginning that are not explained with
comments? I know now by experience that the first one TVqQAAMAA is
.exe, but what about the rest of them?
Regards,
Peter
Peter,
Can you find a little time to update the wiki with this information too?
P.S. Your upgrade post was very nice. I noticed you *did* reference toaster
versions in the subject line, just after I sent my reply. Not quite fully
awake yet I guess.
--
-Eric 'shubes'
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
