Re: [Declude.Virus] .DOC identified as .EXE

[R. Scott Perry]

Hopefully somebody can help me out here. I'm not sure if this is a problem with Declude or a problem with the email client, but it appears that Declude is identifying a .doc file as .exe because the file name wraps lines in the message's Content-Disposition line.

The problem in this case appears to be a problem with the mail client:

Content-Type: application/msword;
    name="Millon_Index_of_Personality_Styles_(MIPS)_Assessment_Test.doc"

This MIME header is OK, even though it is split into two lines. RFC822 requires that when lines are split like this ("folding"), that they be split where there is whitespace (a space or tab).

Content-Disposition: inline; filename="Millon_Index_of_Personality_Styles_
    (MIPS)_Assessment_Test.doc"

However, in this case, the mail client split the line at a place where there isn't whitespace. Therefore, when unfolding the line, it turns into:

Content-Disposition: inline; filename="Millon_Index_of_Personality_Styles_ (MIPS)_Assessment_Test.doc"

Note the space after "Styles_" and before "(MIPS)". So the names are different in the two headers, so the mail client is definitely doing something wrong.

I'm going to check to see exactly what Declude Virus is doing in this case, to make sure that it is handling the situation properly.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.