[Avcheck] Pre-announce: avcheck-0.9

Michael Tokarev mjt@tls.msk.ru
Fri, 12 Jul 2002 13:17:42 +0400


Ralf Hildebrandt wrote:
> 
> On Thu, Jul 11, 2002 at 01:50:16PM +0200, Ralf Hildebrandt wrote:
> 
> > Right now it's working, it detects viruses. Let's see how it survives
> > the day.
> 
> It works. One thing I noticed this day:
> 
> One mail doesn't go through. When I "postcat" the queuefile to get at
> it's contents and scan those, avp reports:
> 
> /tmp/strangemessage/[From "Tobias" <sender@charite.de>][Date Wed, 10 Jul 2002 12:01:17 +0200]/JPGWIZ.EXE/WISE0018.BIN   UPX: unknown format.
> /tmp/strangemessage/[From "Tobias" <sender@charite.de>][Date Wed, 10 Jul 2002 12:01:17 +0200]/JPGWIZ.EXE/WISE0018.BIN   I/O error.
> /tmp/strangemessage/[From "Tobias" <sender@charite.de>][Date Wed, 10 Jul 2002 12:01:17 +0200]/JPGWIZ.EXE        I/O error.
> /tmp/strangemessage     I/O error.
> 
> What is UPX?

UPX stands for Ultimate Packer for eXecutables, see http://upx.sourceforge.net/ .

It seems avcheck should ignore I/O errors returned from avp.  What's avcheck
message (or, what's avp's return code)?

/mjt