Virus Detection???From ...

[robinhood]

Got this in the mail...
*********************************************************************
The Virus Detection Software has reported that you were
sent an E-mail from www-data@risestar1-coloc.nisa.net, containing the [Outlook 'CR' Vulnerability] virus in the
[No attachment] attachment. The subject of the E-mail was "DSSChat - Pirates Den Discussion Forum has Returned".
The E-mail containing the virus has been quarantined to prevent further damage.

Headers Follow:
[Deleted due to dangerous content]

*********************************************************************

Thought you may want to know...;)

[RiseStar]

Your virus scanner must be out of adjustment, an email was sent out, but no attachments were there, just a plain text email

[whyme2]

Using Imail with Declude I see..... Here is what they had to say....

A company recently complained to us that emails they send were being
trapped by Declude Virus marked as having a Outlook 'CR' vulnerability.
I checked on this and could not find a CR in then subject line of
several emails from them held in the virus directory - any clues?


Have you checked them with a program that will display CRs? Many programs will treat them as they would a CRLF, so you might just see:


Subject: This is a
test

That is a perfectly valid subject, *if* it is a CRLF breaking the line, and not a CR.

Also, it is possible that the CR occurs somewhere in the headers other than in the subject. And, if you save the file after viewing it, you will likely end up removing the CR character.

If the email software Rise is using put a CR to break the line instead of a CRLF this is where the problem arose. Hope this helps....

[robinhood]

Originally posted by RiseStar
Your virus scanner must be out of adjustment, an email was sent out, but no attachments were there, just a plain text email

Well, I didn't include the headers...but, this email never got to me...it was intercepted...and claimed to have a virus...

I don't run virus software on my pc for other reasons...Just posted this here to let you know that the email was blocked for unknown reasons other than claiming to have a virus...

[robinhood]

^^^

[jpenner]

...not to mention that fact that most viruses these days cloak themselves and fake the "from" address to something they find on the infected systems web cache or in their email files...