ramya wrote:
I have the mails quarantined and decoded all of them contained different zip files. There where 5 occurrences.
[snip]
As per us suggestion i did test the mails. They all came through clean. I am unable to zip the file.
You don't have to. Just submit the original, quarantined, undecoded mail.
So i am not able to submit the files..Is the signature for WORM_Netsky.DAM present in the database. How do i find out wat is present and wat is not present in the database.
If the online scanner can't detect the original mail, then most likely the signature (at least for that particular variant) is not present.
To see what signatures are present, you can use "sigtool -l". Note that virus naming might be different.
Regards, Fajar _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
