I am having this problem as well. I have about 20 emails in my quaratine which my qmail-scanner blocked because they had .exe or /pif attachments. We have these attachment types blocked for security reasons. However it turns out these attachements all had virii in them. Some flat out .exe attachments, some .exe attachments in zip files and some that are using different types of encoding to fool virus scanners. I ran clamdscan on my quarantine folder and NO messages are found to contain the Mydoom/Novarg virus. I know for a fact atleast 5 are infected. I ran freshclam twice this morning and it got updates both times.
I am running clamd 0.65 and my virus defs are as follows: ClamAV update process started at Tue Jan 27 09:38:23 2004 main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm) daily.cvd updated (version: 108, sigs: 593, f-level: 1, builder: ddm) Database updated (20580 signatures) from database.clamav.net (207.201.202.73). Everything looks good yet Novarg is NOT detected. Thanks Jim Maul Eastern Long Island Hospital 631-477-5417 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Shawn > Tayler > Sent: Tuesday, January 27, 2004 9:31 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] SCO.a > > > > > Nigel, > > I have several examples of this. Even with older virii. > > Would you be interested in them as well? > > Shawn > > On Tue, 27 Jan 2004 08:52:58 +0000 Nigel Horne <[EMAIL PROTECTED]> > exclaimed: > > > On Tuesday 27 Jan 2004 3:11 am, McKeever Chris wrote: > > > > > Any suggestions? It finds other virii fine when they are still > > > encoded, maybe the definitions need to be added for its MIME version? > > > > Please forward an *original* copy (hmm, that's a contradiction in terms) > > of the e-mail to me at [EMAIL PROTECTED] and I'll look into it. > > > > > Chris McKeever > > > If you want to reply directly to me, please use > > > cgmckeever--at--prupref---dot---com http://www.prupref.com > > > > -Nigel > > > > -- > > Nigel Horne. Arranger, Composer, Typesetter. > > NJH Music, Barnsley, UK. ICQ#20252325 > > [EMAIL PROTECTED] http://www.bandsman.co.uk > > > > > > > > ------------------------------------------------------- > > The SF.Net email is sponsored by EclipseCon 2004 > > Premiere Conference on Open Tools Development and Integration > > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > > http://www.eclipsecon.org/osdn > > _______________________________________________ > > Clamav-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/clamav-users > > > > > ------------------------------------------------------- > The SF.Net email is sponsored by EclipseCon 2004 > Premiere Conference on Open Tools Development and Integration > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > http://www.eclipsecon.org/osdn > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users >
smime.p7s
Description: S/MIME cryptographic signature
