Strange virus reports / Bug?

[Jeff A. Earickson]

Hi,
   I had this same bug thru many versions of MS.  It only affected
three people (two Windoze, one Mac).  We stared at their machines,
looking for viruses.  Nothing was ever found.  I finally commented out
the line:

deny  executable      No executables          No programs allowed

in filetype.rules.conf to chase the problem away.  The only thing
I could figure was that the text attachment had the execute bit
turned on (eg, chmod 700) somehow, and that triggered this rule.
My Setup: Solaris 9, MS 4.29.3, SA 2.63, Razor, sendmail 8.12.11.

Jeff Earickson
Colby College

On Tue, 23 Mar 2004, Jan-Peter Koopmann wrote:

> Date: Tue, 23 Mar 2004 08:59:22 +0100
> From: Jan-Peter Koopmann <Jan-Peter.Koopmann at SECEIDOS.DE>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Strange virus reports / Bug?
>
> Hi Julian,
>
> a customer just called since several messages were blocked due to "no programs allowed". The strange thing: When I look at the message in the quarantine, I can find no attachment or at least no program at all. Some are simple text messages only. I find a "msg-91477-124.txt" etc. in there which only contains the Virus Warning though. I am running 4.29.3 at the moment. I will send you a copy of the mail off-list.
>
>
> Regards,
>
> Jan-Peter Koopmann
> Dipl.-Wirtschaftsinformatiker
> Senior Engineer
>
> --
> Seceidos GmbH
> Robert-Bosch-Str.7
> 64293 Darmstadt/Germany
>
> Phone:  +49 (6151) 66843-43
> Fax:    +49 (6151) 66843-52
> E-Mail: jan-peter.koopmann at seceidos.de
> Web:    http://www.seceidos.de
>
>