Your mimeqp unfortunately doesn't solve F-Prot problem with Swen virus e-mails - the problem is probably in combination of "multipart/alternative" and "multipart/related" attachments that F-Prot seems not to be able to deal with. Splitting attachments should solve it in general.
You can test with Swen virus message downloadable from www.iclub.cz/xmail/_virus/swen.zip - running F-Prot on the message file or the one after mimeqp processing doesn't succeed in finding the virus. F-Prot succeeds after AttachmentSplitter processing the message. Cheers, Roman At 13:10 26.9.2003 -0300, you wrote: >In the new version of the AV Filter I'm using mimeqp to de-mime some strange >messages formats. >But I will test your script and recommend it in future releases of AV >Filter. > >Great job! > >Regards > >Edinilson >---------------------------------------------- >ATINET-Professional Web Hosting >Tel Voz: (0xx11) 4412-0876 >http://www.atinet.com.br > > >----- Original Message ----- >From: "Roman Dusek" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, September 26, 2003 12:15 PM >Subject: [xmail] announce: AttachmentSplitter add-on for filters using >F-Prot for DOS > > > >Hi, > >in some cases, F-Prot for DOS isn't able to parse message attachments from >XMail message file and thus isn't able to locate virus inside. Especially >this happens on Swen virus lately. > >That's why I have developed the script that splits the message into several >files, each containing one attachment. Running F-Prot for DOS on these >files, viruses are detected successfully. > >You can download the script and find more info on >http://www.iclub.cz/xmail/?attachmentsplitter > >The script was developed to be used with AV filter by Edinilson ( >http://www.atinet.com.br/xmail ). Edinilson: please feel free to integrate >the script with your AV Filter and distribute it. > >Roman > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
