Problem after upgrade to 4.32.5-1

[Vladimir M Costa]

Hi Ugo ,


>Aug  5 10:53:36 arara MailScanner[29869]: ^M^M^M^M^M^M^M^M./i75DrHgW031927/msg2601.zip  Virus identified  I-Worm/Netsky.R
>Aug  5 10:53:36 arara MailScanner[29869]: Virus Scanning: Avg found 1 infections

  See the  third virus scanning output, many "^M" in file path and the System Administrators mail not display the third
result. Follow another example.



maillog output
8<--------------------------------------------------------------
Aug  5 14:17:48 canario MailScanner[17337]: Spam Checks: Starting
Aug  5 14:17:48 canario MailScanner[17337]: RBL checks: i75HHOIP007863 found in SBL+XBL
Aug  5 14:17:49 canario MailScanner[17337]: Message i75HHOIP007863 from xxx.xxx.xxx.xxx (3dxxx at univap.br) to univap.br
is spam, SBL+XBL
Aug  5 14:17:50 canario MailScanner[17337]: Spam Checks: Found 1 spam messages
Aug  5 14:17:50 canario MailScanner[17337]: Spam Actions: message i75HHOIP007863 actions are deliver
Aug  5 14:17:50 canario MailScanner[17337]: Virus and Content Scanning: Starting
Aug  5 14:17:51 canario MailScanner[17337]: /i75HHOIP007863/important_mmsilva.txt.scr        Found the W32/Netsky.p at MM
virus !!!
Aug  5 14:17:51 canario MailScanner[17337]: Virus Scanning: McAfee found 1 infections
Aug  5 14:17:51 canario MailScanner[17337]:
/var/spool/MailScanner/incoming/17337/./i75HHOIP007863/important_mmsilva.txt.scr: Worm.SomeFool.P FOUND
Aug  5 14:17:52 canario MailScanner[17337]: Virus Scanning: ClamAV found 1 infections

        Here
Aug  5 14:17:52 canario MailScanner[17337]: ^M^M^M^M^M^M^M./i75HHOIP007863/important_mmsilva.txt.scr  Virus identified
I-Worm/Netsky.Q


Aug  5 14:17:52 canario MailScanner[17337]: Virus Scanning: Avg found 1 infections
Aug  5 14:17:52 canario MailScanner[17337]: Infected message i75HHOIP007863 came from xxx.xxx.xxx.xxx
Aug  5 14:17:52 canario MailScanner[17337]: Virus Scanning: Found 1 viruses
Aug  5 14:17:52 canario MailScanner[17337]: Filename Checks: Possible virus hidden in a screensaver (i75HHOIP007863
important_mmsilva.txt.scr)
Aug  5 14:17:52 canario MailScanner[17337]: Filetype Checks: No executables (i75HHOIP007863 important_mmsilva.txt.scr)
8<--------------------------------------------------------------



System Administrators report

8<--------------------------------------------------------------
 Sender: 3dxxx at univap.br
IP Address: xxx.xxx.xxx.xxx
 Recipient:xxxa at univap.br
   Subject:
 MessageID: i75HHOIP007863
    Report: /i75HHOIP007863/important_mmsilva.txt.scr        Found the W32/Netsky.p at MM virus !!!
            important_mmsilva.txt.scr contains Worm.SomeFool.P
            Windows Screensavers are often used to hide viruses (important_mmsilva.txt.scr)
            No programs allowed (important_mmsilva.txt.scr)

Full headers are:
8<--------------------------------------------------------------



Vladimir


> Could you tell us where is the error, 'cause I can't see any.
>
> Ugo
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html