[...]

On the 11th day of February in the year 2004 you wrote:

> Date: Wed, 11 Feb 2004 19:54:24 -0500
> From: Michael Menefee <[EMAIL PROTECTED]>
> To: Michael Menefee <[EMAIL PROTECTED]>,
>      "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>,
>      [EMAIL PROTECTED]
> X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham 
>       version=2.63
> Subject: RE: [Qmail-scanner-general]Mydoom/Worm.SCO
> 
> Let me clarify...having read some other posts on this list...the messages
> that are getting through are NOT bounces....also, I have only ever caught
> the Mydoom.A (Worm.SCO.A) variant....anyone else seen much in the way of
> email-borne Mydoom.B or Myjuice variants?
> 


I'm seeing MyDoom.B, Mimail.J, SCO.A and SCO.A.enc getting trapped.
                                                                                
I have also seen SCO.A get through. I'm sorry that I can't provide much
more information than that, though. The logs had rolled over by the time
the user opened the message.
                                                                                
I'm running Q-S 1.20 with ClamAV 0.65 (CLAMD). I also have perlscanner
configured to deny CMD files (which is the type that got through in a zip
file.)
                                                                                



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to