> any 'exe' emailed to me from an unknown sender must be). Its probably
> just a trojan :_) If you want to look at the suspicious message, its
> in ftp://spam:[EMAIL PROTECTED]/unknown_mail.txt
>
It's the top of a upx'd binary. 423 bytes is far too small for a usable
PE binary so it sounds like you got some corrupt virus trying to
propigate. If you have a sandbox, try to run it -- I bet it will bomb and
do nothing. Windows /may/ even refuse to execute it.
----
[EMAIL PROTECTED] tmp]# upx -d /tmp/ranking.htm.exe
Ultimate Packer for eXecutables
Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002
UPX 1.24 Markus F.X.J. Oberhumer & Laszlo Molnar Nov 7th
2002
File size Ratio Format Name
-------------------- ------ ----------- -----------
upx: /tmp/ranking.htm.exe: CantUnpackException: exe header corrupted
--
Eric Wheeler
Vice President
National Security Concepts, Inc.
PO Box 3567
Tualatin, OR 97062
http://www.nsci.us/
Voice: (503) 293-7656
Fax: (503) 885-0770
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
