Picked up as what, by what scanner(s)?
W32/Bagz-C,D and E by sophie using Sophos AVI.
Nigel Horne wrote:
Have you submitted them to www.clamav.net?
Yes, I've been submitting my quota of 2/day. I see something I sent in was incorporated in update 873 as submission 36215 although that was for Mytob.
All the Bagz that slip by ClamAV seem to have an SMTP engine that starts the session with "EHLO 127.0.0.1" which provides a good basis for rejection (by the MTA).
Andy _______________________________________________ http://lurker.clamav.net/list/clamav-users.html