This is very peculiar. Messages that used to contain the Gibe virus (but
were removed by our virus scanner) are causing evolution to crash with a
segmentation fault when I try to select, open or delete them. Does
anyone know what's going on?

I'm attaching one such message to this mail.

(I'm running evolution 1.4.5 in Gentoo with a Courier IMAP server on
OpenBSD.)

-- 
Stuart Luppescu -=- s-luppescu .at. uchicago.edu        
University of Chicago -=- CCSR 
才文と智奈美の父 -=-    Kernel 2.4.23-ck1                
Someone in DAYTON, Ohio is selling USED CARPETS to 
 a SERBO-CROATIAN 
 

From [EMAIL PROTECTED]  Fri Dec  5 12:50:54 2003
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from midway.uchicago.edu (midway.uchicago.edu [128.135.12.12])
        by mail.consortium-chicago.org (Postfix) with ESMTP id 1B1E6468D4
        for <[EMAIL PROTECTED]>; Fri,  5 Dec 2003 12:50:32 -0600 (CST)
Received: from plaisance.uchicago.edu (plaisance.uchicago.edu [128.135.12.8])
        by midway.uchicago.edu (8.12.10/8.12.9) with ESMTP id hB5Ip5H0007082
        for <[EMAIL PROTECTED]>; Fri, 5 Dec 2003 12:51:20 -0600 (CST)
Received: from midway.uchicago.edu (midway.uchicago.edu [128.135.12.12])
        by plaisance.uchicago.edu (8.12.10/8.12.9) with ESMTP id hB5IoC0u013772
        for <[EMAIL PROTECTED]>; Fri, 5 Dec 2003 12:50:12 -0600 (CST)
Received: (from [EMAIL PROTECTED])
        by midway.uchicago.edu (8.12.10/8.12.9) id hB5IoC2P005210
        for [EMAIL PROTECTED]; Fri, 5 Dec 2003 12:50:12 -0600 (CST)
Received: from fep03-svc.swip.net (fep03.swip.net [130.244.199.131])
        by midway.uchicago.edu (8.12.10/8.12.9) with ESMTP id hB5ImnH2002651;
        Fri, 5 Dec 2003 12:49:09 -0600 (CST)
Received: from peigo ([213.101.50.136]) by fep03-svc.swip.net with SMTP
          id <[EMAIL PROTECTED]>;
          Thu, 4 Dec 2003 21:49:41 +0100
X-PH: V4.4 (uchicago), $Revision: 1.60 [EMAIL PROTECTED]
From: "network message system" <[EMAIL PROTECTED]>
To: " " <[EMAIL PROTECTED]>
Subject: {Virus?} Abort Notice
Mime-Version: 1.0
Content-type: multipart/mixed; boundary="yhbhxpulbhtlq"
Message-Id: <[EMAIL PROTECTED]>
Date: Thu, 4 Dec 2003 21:50:13 +0100
X-yoursite-MailScanner-Information: Please contact the ISP for more information
X-yoursite-MailScanner: Found to be infected
X-yoursite-MailScanner-SpamScore: ss

--yhbhxpulbhtlq
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<HTML><p><b><font size=3D"+1" color=3D"red">Warning: </FONT>This message ha=
s had one
or more attachments removed (epzsivch.exe). Please read the "yoursite-Attac=
hment-Warning.txt"
attachment(s) for more information.</b><br /></p>

<HEAD></HEAD>
<BODY>
<iframe src=3D"cid:pgbmprvri" height=3D0 width=3D0></iframe>
<BR><BR><BR>Undelivered message to <B>[EMAIL PROTECTED]</B>
<BR><BR><BR>Message follows:<BR><BR><BR><BR>
</BODY></HTML>

--yhbhxpulbhtlq
Content-Type: text/plain;
    charset="us-ascii";
    name="yoursite-Attachment-Warning.txt"
Content-Disposition: attachment; filename="yoursite-Attachment-Warning.txt"
Content-Transfer-Encoding: quoted-printable

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "epzsivch.exe"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Fri Dec  5 12:50:54 2003 the virus scanner said:
   ClamAV: epzsivch.exe contains Worm.Gibe.F=20
   MailScanner: Executable DOS/Windows programs are dangerous in email (epz=
sivch.exe)

Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quaran=
tine/20031205 (message 1B1E6468D4).
--=20
Postmaster
MailScanner thanks transtec Computers for their support

--yhbhxpulbhtlq--

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to