I'm not picking them off either. Qmail+qmail-scanner-1.20rc3+clamav
They just get blocked due to the extension and not because they're virii??
When I scan the quarantine dir nothing comes up with either clamscan or
pavcl.

-----Original Message-----
From: Gerry Doris [mailto:[EMAIL PROTECTED] 
Sent: Monday, September 22, 2003 3:41 PM
To: [EMAIL PROTECTED]
Subject: Re: EMail virus?


> Benjamin J. Weiss pravi:
>>What are the subject lines?  I'm curious if we're talking about the same
>>email....
>>
>>Ben
>>
> we are talking about mail that looks like very convincing message from
> MS with an exe file attached. Subject are different: Latest net update,
> Security patch for MS, etc.

I've had MailScanner/F-Prot/ClamAV/Trend filtering out all of these.  I've
received somewhere close to 100 on my home server since Firday.  The
messages I get are:


The following e-mail messages were found to have viruses in them:

    Sender: [EMAIL PROTECTED]
IP Address: 208.38.58.58
 Recipient: [EMAIL PROTECTED]
   Subject: Newest Net Security Update
 MessageID: h8MJLiom004304
    Report: ClamAV: patch.exe contains Worm.Gibe.F
            F-Prot:
/var/spool/MailScanner/incoming/30420/h8MJLiom004304/patch.exe
Infection: W32/[EMAIL PROTECTED]
            Trend: Found virus WORM_SWEN.A in file
./h8MJLiom004304/patch.exe
            MailScanner: Executable DOS/Windows programs are dangerous in
email (patch.exe)
            No programs allowed (patch.exe)



This message just arrived.  As you can see all three scanners +
MailScanner flagged the problem.  I don't understand why your install is
missing any of these???


Gerry


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to