clamscan - found one!

James Gray james.gray at dot.com.au
Tue Feb 13 22:45:04 UTC 2007


On Wed, 14 Feb 2007 09:20:42 am John Dangler wrote:
> testing my bash script for clamscan...
>
> //home/gymsmoke/.evolution/mail/local/MGJ Corp.sbd/GenXY: W97M.Lafool-7
> FOUND
>
> How can I find out which actual mail message this is ?
> ( I know who sent it to me, so I want to contact them right away)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Don't bother.  That particular virus (like basically all viruses) spoof's the 
sender's address.  The "sender" as it appears in the e-mail is more than 
likely NOT the actual sender.  Grokking the headers wont help much either as 
most spam/virus bots insert spoofed headers too.

You got a virus, clam found it - just delete it :)

Cheers,

James
-- 
BOFH excuse #103:
operators on strike due to broken coffee machine
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1357 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20070214/deba934c/attachment.bin>


More information about the ubuntu-users mailing list