Discussion:
Outlook Express doesn't show Symantec anti-virus message
(too old to reply)
R
2005-05-08 17:37:10 UTC
Permalink
I realize that this is an Outlook Express issue, but it involves reading
Road Runner mail.

Some nice people tried to send me the W32.Sober.O @mm worm as an attachment
to an email. Road Runner's Symantec Anti-Virus program successfully scanned
and cleaned it before it got to me (Thanks RR). However, the descriptive
text generated by the anti-virus program doesn't show up in OE ver. 6 when
the message is viewed. To see it, I have to right-click on the email, select
Properties, choose the Details tab, and click Message Source. When I do, I
see this (in addition to the full header, etc.):
_____________________________________________________
----SymantecAntiVirusScanEngineBoundary:427DDD05:30C1D60D
,ontent-type: text/plain

ALERT!!!
This e-mail in its original form contained one or more attached files that
were infected with a virus or worm, or contained another type of security
threat.
The following attachments were infected and have been repaired:
No attachments are in this category.
The following attachments were deleted due to an inability to clean them:
1. error-mail_info.zip/Winzipped-Text_Data.txt .pif:
***@mm

(. . . .Snipped text. . .)
_____________________________________________________

Anyone have any idea why the above text doesn't show up in the message body
when I view it in OE. I checked all of the settings I could find.
By the way, full info on this worm here:
http://securityresponse.symantec.com/avcenter/venc/data/***@mm.html

Thanks in advance,
-Ron
Scott Lindner
2005-05-08 18:24:19 UTC
Permalink
Could you post the *.eml file as an attachment so we can check it out?

If I understand correctly, if the email is encoded for HTML formatting the
email is actually in the message twice, once as basic text and the other as
the HTML version of the message. If the email you have is encoded for HTML
it's possible that the HTML portion isn't filled out properly but the text
version is.

Scott

Continue reading on narkive:
Loading...