-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I can't answer the first question for you, but it is a good one... my best guess on it though is up until now, metamail was good enough to do the job. Gibe.F is a different beast that makes decoding more difficult.
As for the file creation deal, if you read the trashscan script (its just a bash script) you will notice that one of the last lines deletes the temp directory (not ~/tmp but rather ~/tmp/Trashscan-xxxx) If you want to see the message check ~/mail.virus which is appended to with every infected email. If you want trashscan to stop sending emails, edit the trashscan file (remember is a shell script) and remove the lines that creates the message)
Ray Slakinski
On Thursday, September 25, 2003, at 01:14 PM, Jean-S�bastien Guay wrote:
Ray,
As suggested to me, use uudeview (see script for details) It makes a world of difference!
Thanks for the answer. That did seem to do the trick, at least for the 3
virii I've gotten since I've changed trashscan to use uudeview.
First question: Why is this not mentioned in the README for trashscan (something like "metamail is available by default on most systems, but results will be better if you use uudeview")? I only opted to use metamail because it was already available on my system. I would have liked to have known there were tradeoffs involved.
Second question: I still get mails to root, but now they say "File
successfully written to
/root/tmp/TrashScan-10946/attach/<filename>.exe". When I go check there,
there is no file. So it would seem that whoever sends me that message
deletes the file afterwards. Is it ClamAV who is sending those mails? If
so, why is it doing it if --quiet is specified on the command line? Is
there another way to disable them?
Thanks again,
J-S
________________________________________________ Jean-S�bastien Guay [EMAIL PROTECTED] http://whitestar02.webhop.org/
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (Darwin)
iD8DBQE/czJGA8nDipmVlmkRAqIbAJ98y2BODoJDqw9rug+nZ518mIzKRACg1BIV rj6tbdCUAQFUracHuYPDQ4k= =3flA -----END PGP SIGNATURE-----
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
