You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2004/09/06 14:41:14 UTC

[Bug 3752] New: MICROSOFT_EXECUTABLE rule does not flag recent virus

http://bugzilla.spamassassin.org/show_bug.cgi?id=3752

           Summary: MICROSOFT_EXECUTABLE rule does not flag recent virus
           Product: Spamassassin
           Version: 2.64
          Platform: All
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules (Eval Tests)
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: richard@vdberg.org


Recently I am hit with a virus that uses a pif file which BASE64 encoded starts
like this:

TVoAAAEAAAACAAAA/

Spamassassin's MICROSOFT_EXECUTABLE rule does not pick this up. Since file(1)
does report it as an executable file, I changed the way spamassassin searches
for executables. It's a simple patch for EvalTests.pm



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.