Hello all, We are having the same problem, we are using Clamav at our perimeter, then it forwards it to another server running Symantec. In the last week, Clamav has caught ~1200 viruses, but two got through. Symantec called it [EMAIL PROTECTED] According to Symantec's website, "When a file is detected as [EMAIL PROTECTED], this indicates that it is a MIME-encoded file containing the [EMAIL PROTECTED] worm."
I don't know much about MIME encoding. Should Clamav be able to pick this up? Thanks! David On Thu, 12 Aug 2004 21:05:26 +0300 Arthur Kerpician <[EMAIL PROTECTED]> wrote: > Arthur Kerpician wrote: > > > Todd Lyons wrote: > > > >> Brian Morrison wanted us to know: > >> > >> > >> > >>>> >Received: from localhost [127.0.0.1] by backup.ccina.ro with > >>>> >SpamAssassin (2.60 1.212-2003-09-23-exp); Wed, 11 Aug 2004 > >17:53:00>>> >+0300 > >>>> This is the last line of Received headers, so it never says > >exactly>>> what host it came from. > >>>> > >>> > >>> It was received on the loopback interface surely? > >>> > >> > >> > >> That's kind of what I'm looking at. Some local webserver running > >on> that machine? A formmail.pl on that machine? It does _not_ seem > >like> it came from the outside. And if you don't tell it to scan > >locally> generated emails, then that would certainly explain why it > >got through.> > >> > Testing another thing today....if I send a virus (email saved from NAV > quarantine, which previously passed ClamAV) through SquirrelMail > (runing on the Linux/ClamAV box) it gets detected by ClamAV! So, mails > sent from localhost (127.0.0.1) are scanned! > > > ------------------------------------------------------- > SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media > 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 > Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. > http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
