On Mon, 26 Jul 2004 at 22:16:42 +0200, Tomasz Papszun wrote: > On Mon, 26 Jul 2004 at 14:08:21 -0500, Damian Menscher wrote: > > On Mon, 26 Jul 2004, Mitch (WebCob) wrote: > > > > I *THINK* it *MIGHT* be because mydoom.o has uneven linelengths in the > > uuencoding. I know that bug was fixed recently, but there's no note in > > the ChangeLog of _when_. So maybe only a CVS version will catch these? > > Who knows? > > Responding to my own answer (which hasn't arrived here yet) _again_ > (sorry), I must say that (though the feature of processing said illegal > encoding was announced as backported to 0.75), 0.75 doesn't detect > Worm.Mydoom.M in some illegally encoded messages. > ClamAV devel-20040722 does.
Oh, no... Seems I really should go sleep. I must withdraw my above claim! 0.75 successfully detects Worm.Mydoom.M in illegally encoded messages, at least in these which I tested. I apologize for the mess. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
