Andy wrote:
I'm still confused to what caused this though so I can stop it happening
again. I'm also still worried it couldn't scan that .exe file, yet by just
upgrading the DB it can somehow magically do it now?
It is quite possible the exe file was incomplete making it impossible to
decompress. That happens a lot. It is curious that you bother scanning
exe files at all, though. Many admins reject them immediately along with
all the other file types that Microsoft has identified as dangerous. See:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631
Reject immediately what you can. I've never received a friendly bat,
com, scr, pif, or exe file, for example, so don't waste cpu cycles
scanning them for viruses. They are summarily rejected with prejudice.
dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
