[ The following text is in the "ISO-8859-2" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
I am not sure how that could have gotten to unrar, oh.. I looked again it's
looking at an exe file. I am also a loss as to how come the safe name is a
duplicate though. In any event open Message.pm and look for unrar e -p- -idp
(lines 1635 and 1641) and change to unrar e -Y -p- -idp and that will stop
the looping trying to unpack a duplicate. Is this a self extracting exe?
Kind of looks like it must be. Any chance I get get a copy of the archive in
question? Or get it to Julian.
Julian if you want to mail me off list about this I have a couple of ideas
on this, nothing too difficult I think
Sorry it took so long to see this but I have been off line most of the
day/evening
Rick
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK]On Behalf Of Marcin Ro¿ek
> Sent: Tuesday, March 08, 2005 10:55 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: bug? using unrar
>
>
> Hello,
> i've installed MS version 4.40.2. Today we've received 2
> zip-files that are 100%
> not virused (i've checked them after pulling them from
> quarantine). They were
> quarantined because of containing .exe files). I've released them from
> quarantine using MailWatch but they didn't reach recipient. I've
> checked logs
> and i saw that one of instances of MS couldn't finish scanning
> released message.
>
> Mar 8 16:14:50 gandalf sendmail[14797]: j28FEnXB014797:
> from=<marcin.rozek at ios.edu.pl>, size=897208, class=0, nrcpts=1,
> msgid=<422DC260.6060703 at ios.edu.pl>, proto=ESMTP, daemon=MTA,
> relay=[193.0.91.121]
> Mar 8 16:14:52 gandalf MailScanner[7102]: New Batch: Scanning 1 messages,
> 897726 bytes
> Mar 8 16:14:55 gandalf MailScanner[7102]: Unrar : Archive
> Testing Completed On
> : BIURA.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: BIURA.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DEC32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: DEC32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DECYZJE.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: DECYZJE.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PO32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PO32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PU32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR_PU32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DR_RAP32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: DZU.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: EKD.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: GDZIE32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: GDZIE32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: GMINA32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: GMINA32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: GRAF.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: GRAF.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KAT_MA.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: KAT_MA.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KO32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PO32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PO50.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KO_PU32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: KO_RAP32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: METODYKA.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: NORMY.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: OBSZAR32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: OBSZAR32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: OPH-02.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: OPH-HLP.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: OPHUSER.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: POM32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: POM32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: PRZESZ32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: REJON32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: REJON32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: S_BRAN32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: S_BRAN32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: S_DZIA32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: S_DZIA32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: S_MASZ32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: SEKCJE32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ST_KAR.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: ST_KAR.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TE32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TERENY.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: TERENY.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TR32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TR_PO32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TR_PU32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: TRASY.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: WARI32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: WARI9.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: WARI9.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: WARUN32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: WARUN32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PO32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PO32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PU32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_PU32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_RAP32.CDX
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZA_RAP32.DBF
> Mar 8 16:14:55 gandalf MailScanner[7102]: ZNAKI.DBF
> Mar 8 16:15:45 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'BIURA.DBF' 2>&1
> timed out!
> Mar 8 16:15:45 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/BIURA4.DBF
> Mar 8 16:15:45 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DEC32.CDX
> Mar 8 16:16:36 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DEC32.DBF' 2>&1
> timed out!
> Mar 8 16:16:36 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DEC321.DBF
> Mar 8 16:16:36 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DECYZJE.CDX
> Mar 8 16:17:28 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DECYZJE.DBF' 2>&1
> timed out!
> Mar 8 16:17:28 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DECYZJE4.DBF
> Mar 8 16:17:28 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR32.CDX
> Mar 8 16:18:19 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DR32.DBF' 2>&1
> timed out!
> Mar 8 16:18:19 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR321.DBF
> Mar 8 16:18:19 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PO32.CDX
> Mar 8 16:19:10 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DR_PO32.DBF' 2>&1
> timed out!
> Mar 8 16:19:10 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PO321.DBF
> Mar 8 16:19:10 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PU32.CDX
> Mar 8 16:20:01 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DR_PU32.DBF' 2>&1
> timed out!
> Mar 8 16:20:01 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_PU321.DBF
> Mar 8 16:20:53 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DR_RAP32.DBF'
> 2>&1 timed out!
> Mar 8 16:20:53 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DR_RAP321.DBF
> Mar 8 16:21:44 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'DZU.DBF' 2>&1
> timed out!
> Mar 8 16:21:44 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/DZU4.DBF
> Mar 8 16:22:35 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'EKD.DBF' 2>&1
> timed out!
> Mar 8 16:22:35 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/EKD4.DBF
> Mar 8 16:22:35 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GDZIE32.CDX
> Mar 8 16:23:26 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'GDZIE32.DBF' 2>&1
> timed out!
> Mar 8 16:23:26 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GDZIE321.DBF
> Mar 8 16:23:26 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GMINA32.CDX
> Mar 8 16:24:17 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'GMINA32.DBF' 2>&1
> timed out!
> Mar 8 16:24:17 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GMINA321.DBF
> Mar 8 16:24:18 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GRAF.CDX
> Mar 8 16:25:09 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'GRAF.DBF' 2>&1
> timed out!
> Mar 8 16:25:09 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/GRAF4.DBF
> Mar 8 16:25:09 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KAT_MA.CDX
> Mar 8 16:26:00 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'KAT_MA.DBF' 2>&1
> timed out!
> Mar 8 16:26:00 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KAT_MA3.DBF
> Mar 8 16:26:51 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'KO32.DBF' 2>&1
> timed out!
> Mar 8 16:26:51 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO321.DBF
> Mar 8 16:27:42 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'KO_PO32.DBF' 2>&1
> timed out!
> Mar 8 16:27:42 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO_PO321.DBF
> Mar 8 16:28:34 gandalf MailScanner[7102]: Safepipe in Message.pm :
> /usr/local/bin/unrar e -p- -idp
> '/var/spool/MailScanner/incoming/7102/j28FEnXB014797/DBF.EXE'
> 'KO_PO50.DBF' 2>&1
> timed out!
> Mar 8 16:28:34 gandalf MailScanner[7102]: Unrar : Encrypted Or
> Extract Error
> Creating 0 length
> /var/spool/MailScanner/incoming/7102/j28FEnXB014797/KO_PO502.DBF
>
>
> When i run 'strace -p 7102' i see:
>
> Process 7102 attached - interrupt to quit
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 696
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 261
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 176
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 129
> read(10, "[Q]uit \n\nPOM32.DBF already exist"..., 4096) = 157
> read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 158
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 162
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 204
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 119
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 156
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 169
> read(10, ", [Q]uit \n\nPOM32.DBF already exi"..., 4096) = 159
> read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 170
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 129
> read(10, "[Q]uit \n\nPOM32.DBF already exist"..., 4096) = 152
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 165
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 167
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 158
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 128
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 151
> read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 153
> read(10, "[E]ver, [R]ename, [Q]uit \n\nPOM32"..., 4096) = 164
> read(10, "[N]o, [A]ll, n[E]ver, [R]ename, "..., 4096) = 198
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 169
> read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 158
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 151
> read(10, ", n[E]ver, [R]ename, [Q]uit \n\nPO"..., 4096) = 160
> read(10, "[Y]es, [N]o, [A]ll, n[E]ver, [R]"..., 4096) = 135
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 162
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 159
> read(10, ", [R]ename, [Q]uit \n\nPOM32.DBF a"..., 4096) = 162
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 136
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 145
> read(10, "[A]ll, n[E]ver, [R]ename, [Q]uit"..., 4096) = 164
> read(10, "\n[Y]es, [N]o, [A]ll, n[E]ver, [R"..., 4096) = 135
> read(10, " \n\nPOM32.DBF already exists. Ove"..., 4096) = 153
> read(10, "n[E]ver, [R]ename, [Q]uit \n\nPOM3"..., 4096) = 163
> read(10, ", [N]o, [A]ll, n[E]ver, [R]ename"..., 4096) = 130
> read(10, "\n\nPOM32.DBF already exists. Over"..., 4096) = 161
> read(10, "[R]ename, [Q]uit \n\nPOM32.DBF alr"..., 4096) = 160
> read(10, ", [A]ll, n[E]ver, [R]ename, [Q]u"..., 4096) = 166
>
> (and so on...)
> It looks like MS is trying to unpack files for a few times.
> Strange is that MS is using 'unrar' for unpacking .zip ('file' shows: Zip
> archive data, at least v2.0 to extract)
>
> I'm using clamavmodule, sophossavi and bitdefender.
>
> Any advice?
> --
> Regards,
> Marcin
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!