<html><head><style type='text/css'>body { font-family: 'Verdana'; font-size: 10pt; color: #000000}</style></head><body>Hi Rick,<br><br>I changed the code too :-<br><br> my ($dot,$childname,$filename,$rest) = split('/',$results);<br> if ($filename =~ /.+?\sFOUND$/ && $rest eq '') {<br> $rest = $filename;<br> $childname =~ s/\.header//;<br> $filename = "message.header";<br> }<br><br>and it now detects okay, including in MailWatch :D<br><br><table class="data" border="0" cellpadding="0" cellspacing="0" width="700"><tbody><tr><th width="6%">Rank</th>
<th width="44%">Virus</th>
<th width="50%">Percentage of detection</th></tr><tr>
</tr><tr><td>1</td><td nowrap="nowrap">Html.Loan.Gen006.Sanesecurity.06120200</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="43%"> </td>
<td style="border: 0px none ; padding: 0px;" width="57%"> 43%</td></tr></tbody></table></td></tr>
<tr><td>2</td><td nowrap="nowrap">Html.Phishing.Bank.Rockv2Gen14.Sanesecurity.07060400</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="37%"> </td>
<td style="border: 0px none ; padding: 0px;" width="63%"> 37%</td></tr></tbody></table></td></tr>
<tr><td>3</td><td nowrap="nowrap">Email.Stk.Gen596.Sanesecurity.07071900.pdf</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="11%"> </td>
<td style="border: 0px none ; padding: 0px;" width="89%"> 11%</td></tr></tbody></table></td></tr>
<tr><td>4</td><td nowrap="nowrap">Html.Img.Gen013.Sanesecurity.06112900</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="2%"> </td>
<td style="border: 0px none ; padding: 0px;" width="98%"> 2%</td></tr></tbody></table></td></tr>
<tr><td>5</td><td nowrap="nowrap">Email.Hdr.Sanesecurity.07061900</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="2%"> </td>
<td style="border: 0px none ; padding: 0px;" width="98%"> 2%</td></tr></tbody></table></td></tr>
<tr><td>6</td><td nowrap="nowrap">Html.Phishing.Bank.Rockv2Gen28.Sanesecurity.07061800</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="2%"> </td>
<td style="border: 0px none ; padding: 0px;" width="98%"> 2%</td></tr></tbody></table></td></tr>
<tr><td>7</td><td nowrap="nowrap">Email.Stk.Gen591.Sanesecurity.07071800.pdf</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="2%"> </td>
<td style="border: 0px none ; padding: 0px;" width="98%"> 2%</td></tr></tbody></table></td></tr>
<tr><td>8</td><td nowrap="nowrap">Worm.Somefool.AR</td><td><table class="data" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr>
<td style="padding: 0px; background-color: rgb(238, 2, 4);" width="2%"> </td>
<td style="border: 0px none ; padding: 0px;" width="98%"> 2%</td></tr></tbody></table></td></tr></tbody></table><br><br><br><br>----- Original Message -----<br>From: "Rick Cooper" <rcooper@dwford.com><br>To: "MailScanner discussion" <mailscanner@lists.mailscanner.info><br>Sent: Thursday, July 19, 2007 1:56:10 PM (GMT) Europe/London<br>Subject: RE: UNKNOWN CLAMD RETURN<br><br> <br><br> > -----Original Message-----<br> > From: mailscanner-bounces@lists.mailscanner.info <br> > [mailto:mailscanner-bounces@lists.mailscanner.info] On <br> > Behalf Of Rick Cooper<br> > Sent: Thursday, July 19, 2007 8:51 AM<br> > To: 'MailScanner discussion'<br> > Subject: RE: UNKNOWN CLAMD RETURN<br> > <br> > <br> > <br> > > -----Original Message-----<br> > > From: mailscanner-bounces@lists.mailscanner.info <br> > > [mailto:mailscanner-bounces@lists.mailscanner.info] On <br> > > Behalf Of UxBoD<br> > > Sent: Thursday, July 19, 2007 8:33 AM<br> > > To: MailScanner discussion<br> > > Subject: Re: UNKNOWN CLAMD RETURN<br> > > <br> > > Rick,<br> > > <br> > > That is the problem as it does not get flagged by MailWatch <br> > > as a Virus, which I believe just grabs the whole line from <br> > > MailScanner.<br> > > <br> > [...]<br> > <br> > I really wish I had that message |->(<br> > <br> > Try this:<br> > <br> > if ($filename =~ /.+?\sFOUND$/ && $childname =~ <br> > /^.+\.header$) {<br> > $rest = $filename;<br> > $filename = $childname;<br> > $childname =~ s/(.+)\.header$/$1/;<br> > }<br> > <br><br>[...]<br><br>Doh! Of course the first line should be:<br><br>if ($filename =~ /.+?\sFOUND$/ && $childname =~ /^.+\.header$/) {<br><br>Forgot the last '/' in "$childname =~ /^.+\.header$/" sorry<br><br>Rick<br><br><br>--<br>This message has been scanned for viruses and<br>dangerous content by MailScanner, and is<br>believed to be clean.<br><br><br>-- <br>MailScanner mailing list<br>mailscanner@lists.mailscanner.info<br>http://lists.mailscanner.info/mailman/listinfo/mailscanner<br><br>Before posting, read http://wiki.mailscanner.info/posting<br><br>Support MailScanner development - buy the book off the website! <br><br>-- <br>This message has been scanned for viruses and<br>dangerous content by MailScanner, and is<br>believed to be clean.<br><br></body><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</html>