bug? using unrar
[ISO-8859-2] Marcin Ro¿ek
marcin.rozek at IOS.EDU.PL
Tue Mar 8 15:55:08 GMT 2005
[ The following text is in the "ISO-8859-2" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Hello,
i've installed MS version 4.40.2. Today we've received 2 zip-files that are 100%
not virused (i've checked them after pulling them from quarantine). They were
quarantined because of containing .exe files). I've released them from
quarantine using MailWatch but they didn't reach recipient. I've checked logs
and i saw that one of instances of MS couldn't finish scanning released message.
Mar 8 16:14:50 gandalf sendmail[14797]: j28FEnXB014797:
from=<marcin.rozek at ios.edu.pl>, size=897208, class=0, nrcpts=1,
msgid=<422DC260.6060703 at ios.edu.pl>, proto=ESMTP, daemon=MTA, relay=[193.0.91.121]
Mar 8 16:14:52 gandalf MailScanner[7102]: New Batch: Scanning 1 messages,
897726 bytes
Mar 8 16:14:55 gandalf MailScanner[7102]: Unrar : Archive Testing Completed On
: BIURA.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: BIURA.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DEC32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: DEC32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DECYZJE.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: DECYZJE.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DR32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: DR32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PO32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PO32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PU32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PU32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DR_RAP32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: DZU.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: EKD.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: GDZIE32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: GDZIE32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: GMINA32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: GMINA32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: GRAF.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: GRAF.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KAT_MA.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: KAT_MA.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KO32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PO32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PO50.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PU32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: KO_RAP32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: METODYKA.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: NORMY.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: OBSZAR32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: OBSZAR32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: OPH-02.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: OPH-HLP.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: OPHUSER.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: POM32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: POM32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: PRZESZ32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: REJON32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: REJON32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: S_BRAN32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: S_BRAN32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: S_DZIA32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: S_DZIA32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: S_MASZ32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: SEKCJE32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ST_KAR.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: ST_KAR.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TE32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TERENY.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: TERENY.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TR32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TR_PO32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TR_PU32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: TRASY.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: WARI32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: WARI9.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: WARI9.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: WARUN32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: WARUN32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PO32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PO32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PU32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PU32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_RAP32.CDX
Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_RAP32.DBF
Mar 8 16:14:55 gandalf MailScanner[7102]: ZNAKI.DBF
Mar 8 16:15:45 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'BIURA.DBF' 2>&1
timed out!
Mar 8 16:15:45 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/BIURA4.DBF
Mar 8 16:15:45 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DEC32.CDX
Mar 8 16:16:36 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DEC32.DBF' 2>&1
timed out!
Mar 8 16:16:36 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DEC321.DBF
Mar 8 16:16:36 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DECYZJE.CDX
Mar 8 16:17:28 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DECYZJE.DBF' 2>&1
timed out!
Mar 8 16:17:28 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DECYZJE4.DBF
Mar 8 16:17:28 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR32.CDX
Mar 8 16:18:19 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DR32.DBF' 2>&1
timed out!
Mar 8 16:18:19 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR321.DBF
Mar 8 16:18:19 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PO32.CDX
Mar 8 16:19:10 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DR_PO32.DBF' 2>&1
timed out!
Mar 8 16:19:10 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PO321.DBF
Mar 8 16:19:10 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PU32.CDX
Mar 8 16:20:01 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DR_PU32.DBF' 2>&1
timed out!
Mar 8 16:20:01 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PU321.DBF
Mar 8 16:20:53 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DR_RAP32.DBF'
2>&1 timed out!
Mar 8 16:20:53 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_RAP321.DBF
Mar 8 16:21:44 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'DZU.DBF' 2>&1
timed out!
Mar 8 16:21:44 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DZU4.DBF
Mar 8 16:22:35 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'EKD.DBF' 2>&1
timed out!
Mar 8 16:22:35 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/EKD4.DBF
Mar 8 16:22:35 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GDZIE32.CDX
Mar 8 16:23:26 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'GDZIE32.DBF' 2>&1
timed out!
Mar 8 16:23:26 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GDZIE321.DBF
Mar 8 16:23:26 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GMINA32.CDX
Mar 8 16:24:17 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'GMINA32.DBF' 2>&1
timed out!
Mar 8 16:24:17 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GMINA321.DBF
Mar 8 16:24:18 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GRAF.CDX
Mar 8 16:25:09 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'GRAF.DBF' 2>&1
timed out!
Mar 8 16:25:09 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GRAF4.DBF
Mar 8 16:25:09 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KAT_MA.CDX
Mar 8 16:26:00 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'KAT_MA.DBF' 2>&1
timed out!
Mar 8 16:26:00 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KAT_MA3.DBF
Mar 8 16:26:51 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'KO32.DBF' 2>&1
timed out!
Mar 8 16:26:51 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO321.DBF
Mar 8 16:27:42 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'KO_PO32.DBF' 2>&1
timed out!
Mar 8 16:27:42 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO_PO321.DBF
Mar 8 16:28:34 gandalf MailScanner[7102]: Safepipe in Message.pm :
/usr/local/bin/unrar e -p- -idp
'/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE' 'KO_PO50.DBF' 2>&1
timed out!
Mar 8 16:28:34 gandalf MailScanner[7102]: Unrar : Encrypted Or Extract Error
Creating 0 length /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO_PO502.DBF
When i run 'strace -p 7102' i see:
Process 7102 attached - interrupt to quit
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 696
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 261
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 176
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 129
read(10, "[Q]uit \n\nPOM32.DBF already exist"..., 4096) = 157
read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 158
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 162
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 204
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 119
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 156
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 169
read(10, ", [Q]uit \n\nPOM32.DBF already exi"..., 4096) = 159
read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 129
read(10, "[Q]uit \n\nPOM32.DBF already exist"..., 4096) = 152
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 165
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 167
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 151
read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 198
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 169
read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 158
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 151
read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 145
read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 160
read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
(and so on...)
It looks like MS is trying to unpack files for a few times.
Strange is that MS is using 'unrar' for unpacking .zip ('file' shows: Zip
archive data, at least v2.0 to extract)
I'm using clamavmodule, sophossavi and bitdefender.
Any advice?
--
Regards,
Marcin
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list