Strange virus reports / Bug?

[Julian Field]

So you could solve it by setting
Incoming Work Permissions = 0600
?

At 12:02 23/03/2004, you wrote:
>Hi,
>    I had this same bug thru many versions of MS.  It only affected
>three people (two Windoze, one Mac).  We stared at their machines,
>looking for viruses.  Nothing was ever found.  I finally commented out
>the line:
>
>deny  executable      No executables          No programs allowed
>
>in filetype.rules.conf to chase the problem away.  The only thing
>I could figure was that the text attachment had the execute bit
>turned on (eg, chmod 700) somehow, and that triggered this rule.
>My Setup: Solaris 9, MS 4.29.3, SA 2.63, Razor, sendmail 8.12.11.
>
>Jeff Earickson
>Colby College
>
>On Tue, 23 Mar 2004, Jan-Peter Koopmann wrote:
>
> > Date: Tue, 23 Mar 2004 08:59:22 +0100
> > From: Jan-Peter Koopmann <Jan-Peter.Koopmann at SECEIDOS.DE>
> > Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Strange virus reports / Bug?
> >
> > Hi Julian,
> >
> > a customer just called since several messages were blocked due to "no
> programs allowed". The strange thing: When I look at the message in the
> quarantine, I can find no attachment or at least no program at all. Some
> are simple text messages only. I find a "msg-91477-124.txt" etc. in there
> which only contains the Virus Warning though. I am running 4.29.3 at the
> moment. I will send you a copy of the mail off-list.
> >
> >
> > Regards,
> >
> > Jan-Peter Koopmann
> > Dipl.-Wirtschaftsinformatiker
> > Senior Engineer
> >
> > --
> > Seceidos GmbH
> > Robert-Bosch-Str.7
> > 64293 Darmstadt/Germany
> >
> > Phone:  +49 (6151) 66843-43
> > Fax:    +49 (6151) 66843-52
> > E-Mail: jan-peter.koopmann at seceidos.de
> > Web:    http://www.seceidos.de
> >
> >

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654