jpg file quarantined like program

Jorge Arenas csags0 at prodigy.net.mx
Mon May 18 23:43:27 IST 2009


Hi:

I hope someone can help me, MailScanner is stopping jpg files because 
filetype found a program in the file

Logs:
May 18 08:05:40  MailScanner[26740]: Filetype Checks: No executables 
(n4ID5VeT032705 166245Delfines.jpg)
May 18 08:05:40  MailScanner[26740]: Other Checks: Found 1 problems
May 18 08:05:40  MailScanner[26740]: Virus and Content Scanning: Starting
May 18 08:05:44  MailScanner[26740]: Virus Scanning completed at 161379 
bytes per second
May 18 08:05:44  MailScanner[26740]: Saved entire message to 
/var/spool/MailScanner/quarantine/20090518/n4ID5VeT032705
May 18 08:05:44  MailScanner[26740]: Saved infected "166245Delfines.jpg" to 
/var/spool/MailScanner/quarantine/20090518/n4ID5VeT032705

I believe MS uses file to determine the type so, I execute:

# file 166245Delfines.jpg
166245Delfines.jpg: JPEG image data, JFIF standard 1.01, comment: 
"<nso="delfines.nso"> "

I do not know why MS detect an Executable in this type of file

can anyone help me

thanks in advance

Jorge Arenas



More information about the MailScanner mailing list