> >If you read your clamd.log file, do you see any entries for >Trojan.Downloader-647 or Trojan.Downloader-648? Those are from the >recent >"Storm Worm" which should be called the "Recent News Worm" since it >has a >subject line from recent news items, or false news items.
yes. The problem here for the most installations was, that the default AVBytes was 10K. It is catching it with default AVBytes = 50k. > > >If you configure Clamd to ban encrypted zip files and then send a >password >protected zip file in a Uuencoded plain text email to yourself, does >ASSP/Clamd catch it and reject it as a virus as it should? Try it yourself. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
