Mark wrote: > My amavis logs shows the following number of Passed UNCHECKED items:
> 0, 0, 0, 0, 0, 0, 84, 312 > That's 84 yesterday and 312 so far today since midnight. > The days with zero have real data, between 12k and 72k entries, > just no Passed UNCHECKED. > Assuming this is not legit email, what did I likely mangle yesterday > to start > getting this behavior? > I did not make an amavisd.conf change, it's got to be something in > my sql db. > Thanks, > -mark Quite possibly an encrypted, and as of yet, undetected virus. I just got one with a password protected .rar file. I suggest blocking .rar files. I hope your users have not opened any of these. Mine claims to be a patch for an undetected worm. Gary V ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
