David Williams wanted us to know:

>Hello all,
>
>We are having the same problem, we are using Clamav at our perimeter,
>then it forwards it to another server running Symantec.  In the last
>week, Clamav has caught ~1200 viruses, but two got through.  Symantec
>called it [EMAIL PROTECTED]  According to Symantec's website, "When a
>file is detected as [EMAIL PROTECTED], this indicates that it is a
>MIME-encoded file containing the [EMAIL PROTECTED] worm."
>
>I don't know much about MIME encoding.  Should Clamav be able to pick
>this up?

I wonder.  If you hit the max threads and are using the clamav-milter,
then it will drop through.  Try picking up the max threads in
clamav.conf and see if that makes a difference.
-- 
Regards...              Todd
  We should not be building surveillance technology into standards.
  Law enforcement was not supposed to be easy.  Where it is easy, 
  it's called a police state.             -- Jeff Schiller on NANOG
Linux kernel 2.6.3-15mdkenterprise   2 users,  load average: 0.15, 0.05, 0.01


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to