> Benjamin J. Weiss pravi: >>What are the subject lines? I'm curious if we're talking about the same >>email.... >> >>Ben >> > we are talking about mail that looks like very convincing message from > MS with an exe file attached. Subject are different: Latest net update, > Security patch for MS, etc.
I've had MailScanner/F-Prot/ClamAV/Trend filtering out all of these. I've received somewhere close to 100 on my home server since Firday. The messages I get are: The following e-mail messages were found to have viruses in them: Sender: [EMAIL PROTECTED] IP Address: 208.38.58.58 Recipient: [EMAIL PROTECTED] Subject: Newest Net Security Update MessageID: h8MJLiom004304 Report: ClamAV: patch.exe contains Worm.Gibe.F F-Prot: /var/spool/MailScanner/incoming/30420/h8MJLiom004304/patch.exe Infection: W32/[EMAIL PROTECTED] Trend: Found virus WORM_SWEN.A in file ./h8MJLiom004304/patch.exe MailScanner: Executable DOS/Windows programs are dangerous in email (patch.exe) No programs allowed (patch.exe) This message just arrived. As you can see all three scanners + MailScanner flagged the problem. I don't understand why your install is missing any of these??? Gerry -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list