Unparsed F-prot output for encrypted zips

Julian Field MailScanner at ecs.soton.ac.uk
Tue Feb 15 18:02:05 GMT 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Please try the attached patch for SweepViruses.pm and let me know how
you get on.

John Wilcock wrote:

> John Wilcock wrote:
>>> /var/spool/MailScanner/incoming/32006/2214CE100C.14F0A/Fish.zip->glhpfrka.exe
>>> could be a suspicious file (encrypted program in archive) : 1 Time(s)
>>>     Either you've found a bug in MailScanner's F-Prot output parser,
>>> or F-Prot's output format has changed! F-Prot said this
>>> "/var/spool/MailScanner/incoming/32006/2214CE100C.14F0A/Fish.zip->glhpfrka.exe
>>> could be a suspicious file (encrypted program in archive)". Please
>>> mail the author of MailScanner : 1 Time(s)
> This is with the current version of F-prot, i.e. v4.5.3.

Julian Field
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Application/X-GZIP  434bytes. ]
    [ Unable to print this part. ]

More information about the MailScanner mailing list