Hello,
je re�ois des nouveaux virus executables qui passent � travers qmail
----------ioupybupdsdrzbguuczu
Content-Type: application/octet-stream; name="Price.scr"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Price.scr"
TVoAAAEAAAACAAAA//8AAEAAAAAAAAAAQAAAAAAAAAC0TM0hAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAQAAAAFBFAABMAQUAAAAAAAAAAAAAAAAA4AAPAQsBAAAAOgAAAEoAAAAAAAAAoAAA
ABAAAABQAAAAAEAAABAAAAACAAAEAAAAAAAAAAQAAAAAAAAAAvUAAAACAAAAAAAAAgAAAAAA
EAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAnKIAANEAAAAA8AAAAgUAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAABQAACwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAADoAAAAAAAC6OQAA
ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAwAAMAAAAAAAA8goAAABQAAAAAAAAAAAAAAAA
du coup il faut (encore!?) recompiler qmail-smtpd.c
pour ajouter le cas TVoAAAEAA, vers la ligne 370
} else if (linespastheader == 1) {
if (line.len >= 9)
if (!str_diffn(line.s,"TVqQAAMAA",9) ||
!str_diffn(line.s,"TVpQAAIAA",9) ||
!str_diffn(line.s,"TVpAALQAc",9) ||
!str_diffn(line.s,"TVpyAXkAX",9) ||
!str_diffn(line.s,"TVrmAU4AA",9) ||
!str_diffn(line.s,"TVrhARwAk",9) ||
!str_diffn(line.s,"TVoFAQUAA",9) ||
!str_diffn(line.s,"TVoAAAQAA",9) ||
!str_diffn(line.s,"TVoIARMAA",9) ||
!str_diffn(line.s,"TVouARsAA",9) ||
!str_diffn(line.s,"TVrQAT8AA",9) ||
!str_diffn(line.s,"TVoAAAEAA",9) ||
!str_diffn(line.s+18,"DKJx+eAFgAAABYAA",16)
qmailement.
Guy Kastenbaum - Filnet - [EMAIL PROTECTED]
--
Liste de diffusion qmailfr - http://qmail.free.fr/
