It's very strange... 1. I recieved one of those trojan.small variants this morning and wanted to see if clamav can catch it now. So, what I did was to forward the mail to myself and it was just accepted! When checking the (new incoming copy of) the mail it says X-Virus-Status: Clean.
2. I copied the .zip to some dir on the mail server and ran clamdscan of it and it said /var/tmp/trojan.msg: Trojan.Small-57-5 FOUND 3. I composed a new email message and attached the .zip file and tried to send it and it was rejected. 4. I forwarded the first message again to myself and again it was ACCEPTED! The mail client is Outlook 2K. Clamav 0.81 (I know its not the lastest, but we want to wait for 0.84 because of the embedded MIME fix) Sendmail 8.13 Linux Fedora Core 2 Does someone knows why it is different when I just forward the message to when I compose a new one ? (same attachment) Thanks, -Samuel _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
