On Tue, May 23, 2006 at 12:49:50PM -0700, Kelson wrote: > Jan Pieter Cornet wrote: > >Maybe "tons" is slightly exaggerated? Out of approximately 10 million > >emails today, our logs show one hit for XF.Sic.L, and then another hit > >when that email was bounced because of the reject we gave. > > If their customer is trying repeatedly to send "a bunch" of files that > trigger false positives on that rule, then yes, they're going to see > "tons" of them -- regardless of the number of hits in anyone else's logs.
Oops. Thinko, I meant to say: I don't see tons of hits, so there's probably no outbreak of this virus going on, so, yes, it is likely a FP. -- Jan-Pieter Cornet <[EMAIL PROTECTED]> !! Disc lamer: The addressee of this email is not the intended recipient. !! !! This is only a test of the echelon and data retention systems. Please !! !! archive this message indefinitely to allow verification of the logs. !! _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
