<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<STYLE type=text/css>BODY {
FONT-SIZE: 10pt; COLOR: #000000; FONT-FAMILY: 'Verdana'
}
</STYLE>
<META content="MSHTML 6.00.6000.16481" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face="'Verdana'"></FONT> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of
</B>UxBoD<BR><B>Sent:</B> Thursday, July 19, 2007 9:03 AM<BR><B>To:</B>
MailScanner discussion<BR><B>Subject:</B> Re: UNKNOWN CLAMD
RETURN<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV>Hi Rick,<BR><BR>I changed the code too :-<BR><BR>
my ($dot,$childname,$filename,$rest) =
split('/',$results);<BR> if ($filename =~
/.+?\sFOUND$/ && $rest eq '') {<BR>
$rest = $filename;<BR> $childname =~
s/\.header//;<BR> $filename =
"message.header";<BR> }<BR><BR>and it now detects
okay, including in MailWatch :D<BR><SPAN class=843231013-19072007><FONT
face="'Verdana'">[Rick Cooper] </FONT></SPAN></DIV>
<DIV><SPAN class=843231013-19072007></SPAN> </DIV><SPAN
class=843231013-19072007>
<P>What is in the postmaster and user reports ? <BR>If the <SPAN
class=843231013-19072007><FONT
face="'Verdana'"> '</FONT></SPAN>message.header<SPAN
class=843231013-19072007><FONT face="'Verdana'"> </FONT></SPAN><SPAN
class=843231013-19072007><FONT face="'Verdana'"> </FONT></SPAN> shows up
then perhaps it would work as $filename = "SPAM". </P>
<DIV>Rick</DIV>
<DIV> </SPAN><BR><BR></DIV>
<TABLE class=data cellSpacing=0 cellPadding=0 width=700 border=0>
<TBODY>
<TR>
<TH width="6%">Rank</TH>
<TH width="44%">Virus</TH>
<TH width="50%">Percentage of detection</TH></TR>
<TR></TR>
<TR>
<TD>1</TD>
<TD noWrap>Html.Loan.Gen006.Sanesecurity.06120200</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="43%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="57%"> 43%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>2</TD>
<TD noWrap>Html.Phishing.Bank.Rockv2Gen14.Sanesecurity.07060400</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="37%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="63%"> 37%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>3</TD>
<TD noWrap>Email.Stk.Gen596.Sanesecurity.07071900.pdf</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="11%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="89%"> 11%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>4</TD>
<TD noWrap>Html.Img.Gen013.Sanesecurity.06112900</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="2%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="98%"> 2%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>5</TD>
<TD noWrap>Email.Hdr.Sanesecurity.07061900</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="2%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="98%"> 2%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>6</TD>
<TD noWrap>Html.Phishing.Bank.Rockv2Gen28.Sanesecurity.07061800</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="2%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="98%"> 2%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>7</TD>
<TD noWrap>Email.Stk.Gen591.Sanesecurity.07071800.pdf</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="2%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="98%"> 2%</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>8</TD>
<TD noWrap>Worm.Somefool.AR</TD>
<TD>
<TABLE class=data cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD
style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; BACKGROUND-COLOR: rgb(238,2,4)"
width="2%"> </TD>
<TD
style="BORDER-RIGHT: 0px; PADDING-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-LEFT: 0px; PADDING-TOP: 0px; BORDER-BOTTOM: 0px"
width="98%"> 2%</TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><BR><BR><BR><BR>-----
Original Message -----<BR>From: "Rick Cooper"
<rcooper@dwford.com><BR>To: "MailScanner discussion"
<mailscanner@lists.mailscanner.info><BR>Sent: Thursday, July 19, 2007
1:56:10 PM (GMT) Europe/London<BR>Subject: RE: UNKNOWN CLAMD
RETURN<BR><BR> <BR><BR> > -----Original
Message-----<BR> > From: mailscanner-bounces@lists.mailscanner.info
<BR> > [mailto:mailscanner-bounces@lists.mailscanner.info] On
<BR> > Behalf Of Rick Cooper<BR> > Sent: Thursday, July 19,
2007 8:51 AM<BR> > To: 'MailScanner discussion'<BR> > Subject:
RE: UNKNOWN CLAMD RETURN<BR> > <BR> > <BR> >
<BR> > > -----Original Message-----<BR> > >
From: mailscanner-bounces@lists.mailscanner.info <BR> > >
[mailto:mailscanner-bounces@lists.mailscanner.info] On <BR> >
> Behalf Of UxBoD<BR> > > Sent: Thursday, July 19,
2007 8:33 AM<BR> > > To: MailScanner discussion<BR> >
> Subject: Re: UNKNOWN CLAMD RETURN<BR> > >
<BR> > > Rick,<BR> > > <BR> >
> That is the problem as it does not get flagged by MailWatch
<BR> > > as a Virus, which I believe just grabs the whole
line from <BR> > > MailScanner.<BR> > >
<BR> > [...]<BR> > <BR> > I really wish I had that
message |->(<BR> > <BR> > Try this:<BR> >
<BR> > if ($filename =~ /.+?\sFOUND$/ &&
$childname =~ <BR> > /^.+\.header$) {<BR> >
$rest = $filename;<BR> >
$filename
= $childname;<BR> >
$childname
=~ s/(.+)\.header$/$1/;<BR> > }<BR> >
<BR><BR>[...]<BR><BR>Doh! Of course the first line should be:<BR><BR>if
($filename =~ /.+?\sFOUND$/ && $childname =~ /^.+\.header$/)
{<BR><BR>Forgot the last '/' in "$childname =~ /^.+\.header$/"
sorry<BR><BR>Rick<BR><BR><BR>--<BR>This message has been scanned for viruses
and<BR>dangerous content by MailScanner, and is<BR>believed to be
clean.<BR><BR><BR>-- <BR>MailScanner mailing
list<BR>mailscanner@lists.mailscanner.info<BR>http://lists.mailscanner.info/mailman/listinfo/mailscanner<BR><BR>Before
posting, read http://wiki.mailscanner.info/posting<BR><BR>Support MailScanner
development - buy the book off the website! <BR><BR>-- <BR>This message has
been scanned for viruses and<BR>dangerous content by MailScanner, and
is<BR>believed to be clean.<BR><BR><BR>-- <BR>This message has been scanned
for viruses and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is
<BR>believed to be clean. <BR>-- <BR>This message has been scanned for viruses
and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is
<BR>believed to be clean. </BLOCKQUOTE></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>