Several of my users have received the virus classified by ClamAV as Worm.Sober.K today. I use qmail with SpamAssassin and ClamAV through qmailscanner. I'm not sure how it is getting through as:
1. All of my mail is scanned by ClamAV and Clam definitely recognizes this virus. If I take the zip attachment that comes through on these messages and manually scan with Clam the file is marked infected. 2. I've got Russell Nelson's anti-MS executable patch installed. If I create a message, attach the zip, and try to send it to myself through my qmail box it is rejected with the message "552 We don't accept email with such content". 3. I've also tried forwarding the message to myself. Again, it is rejected with "552 We don't accept email with such content". How should I go about tracking this down? --TWH _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
