Antony Stone said:
I can't justify running ANY cvs/beta version on this production system,
though.

> How are you passing your emails to clamav?
I am using mimedefang, I have complete copies off all the virus's that
were missed, and I am trying to determine what is similar between the
messages.
Nothing apparent,
System load is really low.
Messages are all small.
I can send you the messages to look at.
Some of the messages were urlspoof messages, which I don't believe clamav
detects as a virus, and mcafee does.
I discount those messages.



>> When I run a manual command line scan afterwards I catch the virus.
>>
>> clamscan --no-summary --mbox -r qdir-2004-03-10*/ENTIRE_MESSAGE
>>
>> I do see a lot of warnings:
>> LibClamAV Warning: Multipart MIME message contains no boundary lines
>
> That sounds a bit sinister to me...


-- 
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to