On Tuesday 27 January 2004 10:38 am, Christopher X. Candreva wrote: > On Tue, 27 Jan 2004, Matthew Trent wrote: > > Since the SCO virus has a list of common first names it couples with > > domains it finds, one of our employees, "[EMAIL PROTECTED]" got a bunch > > of undeliverable bounces back (unknown users, etc.). These bounces > > contain the full virus in the form of the complete source of the original > > email dumped at the end of the bounce message. Although I'm sure the MIME > > is no longer set up > > clamd 0.65 seems to be catching them here. > > ========================================================== > Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 > WestNet Internet Services of Westchester > http://www.westnet.com/
Well some most certainly did get through. Probably differences in the way the bouncing MTA quotes the original message may cause some to be tagged and others not? -- Matt Systems Administrator Local Access Communications 360.330.5535 ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users