Russian Text = Executable?
Remco Barendse
mailscanner at barendse.to
Mon Aug 3 15:47:21 IST 2009
On Fri, 3 Jul 2009, Richard Bollinger wrote:
> Here's the patch I applied:
> --- ../msdos.FCS 2009-07-03 13:55:06.000000000 -0400
> +++ file-5.03/magic/Magdir/msdos 2009-07-03 14:05:25.000000000 -0400
> @@ -286,7 +286,7 @@
> # but it isn't feasible to match all COM files since there must be at least
> # two dozen different one-byte "magics".
> # test too generic ?
> -0 byte 0xe9 DOS executable (COM)
> +##0 byte 0xe9 DOS executable (COM)
> >0x1FE leshort 0xAA55 \b, boot code
> >6 string SFX\ of\ LHarc (%s)
> 0 belong 0xffffffff DOS executable (device driver)
> @@ -311,13 +311,13 @@
> >>>77 string <\x5B
> >>>>77 string x \b, name: %.8s
> # test too generic ?
> -0 byte 0x8c DOS executable (COM)
> +##0 byte 0x8c DOS executable (COM)
> # updated by Joerg Jenderek at Oct 2008
> 0 ulelong 0xffff10eb DR-DOS executable (COM)
> # byte 0xeb conflicts with "sequent" magic leshort 0xn2eb
> 0 ubeshort&0xeb8d >0xeb00
> # DR-DOS STACKER.COM SCREATE.SYS missed
> ->0 byte 0xeb DOS executable (COM)
> +##>0 byte 0xeb DOS executable (COM)
> >>0x1FE leshort 0xAA55 \b, boot code
> >>85 string UPX \b, UPX compressed
> >>4 string \ $ARX \b, ARX self-extracting archive
>
Suffering from the same problem. How and where should this patch be
applied? Any chance of the patch making it into MailScanner?
Thanks!
More information about the MailScanner
mailing list