Seems it is already in the DB as something else, Trojan.Downloader-6xx. Norton was stripping the file from my email so I couldn't read the headers on it. Not sure why it was slipping past ClamAV however. When I tried to upload these 3 files postcard.exe, Full Clip.exe, and Greeting Card.exe the submission engine said that they exist in the DB as the Trojan.downloader-6xx..
Norton is seeing them as [EMAIL PROTECTED] and Trojan.Peacomm. As far as running freshclam, had been doing that manually ever couple of hours for the past two days to be sure that this little bugger wouldn't get through. Franklyn _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html