qmail: strange output of "file" command

slowleak · 08-10-2001, 10:59 AM

Hi there,

if i do a file * in the qmail source directory i get some of these:
qmail-qstat.sh: fsav (linux) virus (29555-109)
qmail-upq.sh: fsav (linux) virus (28960-99)
trylsock.c: fsav (linux) virus (2619-32)
tryrsolv.c: fsav (linux) virus (2619-32)

the machine is a redhat linux

if i do the same thing on a solaris machine qmail-source directory i don't get that.

Is there something wrong with the linux version of the "file" command or did I get bad qmail-sources?

Any Advice? Please....

SLowleak

unSpawn · 08-10-2001, 10:40 PM

Im not familiar with F-Secure's Fsav, but it also uses (/usr/share/)magic to determine file content. Based on these signatures, it fsav thinks I)these files are part of the Fsav package or II) a virus, tho I think it's the first. Since Fsav is a commercial product u should ask them for a support, alternatively run AVP/RAV/Mcafee's UVSCAN before submitting the files.

HTH, somehow.