Don't know when this started happening, but ClamAV is misidentifying the Zafi worm as Trojan.Downloader.Small-1004.
>From a MailScanner notification: Sender: [EMAIL PROTECTED] IP Address: 85.98.131.226 Recipient: [EMAIL PROTECTED] (changed to protect the innocent) Subject: Fw: Merry Christmas! MessageID: k139qE5t016812 Quarantine: /var/spool/MailScanner/quarantine/20060203/k139qE5t016812 Report: ClamAV Module: postcard.index.jpg4031.zip was infected: Trojan.Downloader.Small-1004 Bitdefender: Found virus [EMAIL PROTECTED] in file postcard.index.jpg4031.zip McAfee: /k139qE5t016812/postcard.index.jpg4031.zip Found the W32/[EMAIL PROTECTED] virus !!! Cheers, Phil ---- Phil Randal Network Engineer Herefordshire Council Hereford, UK _______________________________________________ http://lurker.clamav.net/list/clamav-users.html