Error with a Zip File - System at 100% CPU

[Derek Winkler]

Two of my servers were at 100% CPU utilization.

After running MailScanner in debug mode got the following error on the
console...

format error: bad signature: 0x5003ff9b at offset 737316 in file
/var/spool/MailScanner/incoming/10615/i5974bR05977/1.zip
 at /usr/perl5/site_perl/5.005/Archive/Zip.pm line 677

I moved the offending email into the outgoing queue, problem went away.

I got a copy of qf, df and zip if interested.

Different email, same problem, from and to same users on other server.

Clam says:

# clamscan 1.zip
1.zip: Zip module failure.
1.zip: OK

----------- SCAN SUMMARY -----------
Known viruses: 21871
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2.75 MB
I/O buffer size: 131072 bytes
Time: 4.162 sec (0 m 4 s)
#

Thought you'd want to know,

Derek Winkler
Security Administrator

Algorithmics
185 Spadina Ave
Toronto, Ontario
Canada
M5T 2C6

Phone: 416-217-4107
  Fax: 416-971-6100

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html