I have not submitted any virii (correct word?) before, so please bear with me. I always run latest stable, currently 0.75 and have not had any virus issues up until now. I am seeing a high number of mails in the below format hitting our mail servers.
>Dear user <[EMAIL PROTECTED]>, >Your e-mail account has been used to send a large amount of spam messages >during this week. >Obviously, your computer had been infected by a recent virus and now runs a hidden proxy server. >Please follow our instruction in order to keep your computer safe. >Best wishes, >The <domain> team. with a zip file attached containing a pif file. I submitted the zip file only to have the message returned to me advising that it is not a virus, but "Binary fragment. Harmless." Symantec identify these mails as My.Doom.o and i have checked sigtool which identifies My.Doom.m, but not My.Doom.o - My question is, how do i get clamav to identify these files as a virus? Many thanks -- +-------------------------------------+ (0> Scott Ryan //\ Unix/Linux Systems Engineer V_/_ Telkom Internet - SA +-------------------------------------+ Email: [EMAIL PROTECTED] Cell: +27721164832 Work: +27126807835 +-------------------------------------+ ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users