Well two things come to mind. It isn't ClamAV's job to block spam, only viruses and immediately identifiable deceptions like phishing attacks.
...like a trojan spread by email that, after installing itself, serves as a spam proxy?
Secondly, the only clue about the path taken is in the mail headers, ClamAV is really a body scanning tool so again it isn't designed to identify the attack approach you mention.
The question didn't seem to be about blocking spam sent using this approach, it seemed to be about blocking distribution of the trojan that would enable it.
In other words... "Does anyone know which trojan/virus/etc. does this, and does ClamAV detect it?"
-- Kelson Vibber SpeedGate Communications <www.speed.net> _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
