Virus Klez.H and McAfee

Antonio Coloma antonio at DESCOM.ES
Thu May 9 15:16:03 IST 2002


Hi!

  I have applied the "explode.pl" patch and works fine for Klez.H virus ...
and I have tested it with eicar and works fine too.

  Thanx for all!



>Try this:
>-------------------------------------------------------------
>*** /usr/local/mailscanner/mailscanner/bin/explode.pl   Fri Feb  1 10:22:44
>2002
>--- explode.pl  Thu May  9 12:07:58 2002
>***************
>*** 301,310 ****
>--- 301,315 ----
>                              Data => $Warning,
>                              Encoding => 'quoted-printable',
>                              Charset => 'us-ascii',
>                              Top => 0;
>     $parent->parts(\@parts);
>+
>+   # And make the parent a multipart/mixed if it's a multipart/alternative
>+   $parent->head->mime_attr("content-type" => "multipart/mixed")
>+     if ($parent->is_multipart) &&
>+        ($parent->head->mime_attr("content-type") =~
>/multipart\/alternative/i);
>   }
>
>   # Disinfect all the infected entities
>   sub Disinfect {
>     my($Reports, $Types, $Id2Entity, $File2Entity, $Entity2Parent,
>$Entity2File, $IsTNEF) = @_;
>-------------------------------------------------------------
>If you don't understand what to do with the text above, you are probably
>best off not trying it!
>;-)
>



More information about the MailScanner mailing list