Hi A user forwarded an email with worm to me. This email passed our clamav on 2005.09.20 22:10:41 CEST. When I checked forwarded email with clamscan around 2005.09.21 10:00:00 CEST it correctly detected Worm.Bagle.Gen-5.
Between an original email and my test there were two auto updates of DB. How can I chceck if the worm passed because its signature wasn't present in DB at that time? I want to know if that worm passed because of stale DB, not because of other flaw in our AV mechanism. Regards -- --= Michal Kochanowicz =--==--==BOFH==--==--= [EMAIL PROTECTED] =-- --= finger me for PGP public key or visit http://michal.waw.pl/PGP =-- --==--==--==--==--==-- Vodka. Connecting people.--==--==--==--==--==-- A chodzenie po górach SSIE!!! _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
