Gary wrote: > Mark wrote:
>> My amavis logs shows the following number of Passed UNCHECKED items: >> 0, 0, 0, 0, 0, 0, 84, 312 >> That's 84 yesterday and 312 so far today since midnight. >> The days with zero have real data, between 12k and 72k entries, >> just no Passed UNCHECKED. >> Assuming this is not legit email, what did I likely mangle yesterday >> to start >> getting this behavior? >> I did not make an amavisd.conf change, it's got to be something in >> my sql db. >> Thanks, >> -mark > Quite possibly an encrypted, and as of yet, undetected virus. I just got > one with a password protected .rar file. I suggest blocking .rar files. I > hope your users have not opened any of these. Mine claims to be a patch > for an undetected worm. A-Squared Found nothing AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found Email.Phishing.RB-686 Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing Panda Antivirus Found nothing Rising Antivirus Found nothing VirusBuster Found nothing VBA32 Found nothing I think you are getting this virus. I think it's more serious than ClamAV thinks it is. I would say there's another storm a brewin'. Gary V ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
