Hi Clamav Users,
I'm getting a FP-Alert from a customer regarding the following sig:
main.hdb:15c9c9ed5046a885d241afd2159c236a:43180:Junk.Corrupted-50
The scan is done on our inbound authenticated mail host, which rejects our
customer's mail with the following error-message:
Fehler: <email-adresse-empfänger>host smtp.1und1.de[212.227.15.167] said:
551 virus infected mail rejected ("Junk.Corrupted-50") (in reply to
end of
DATA command)
The only info I could find on this sig is the following discussion:
http://www.clamxav.com/BB/viewtopic.php?t=3041&p=17129
Can anyone tell me more about this sig and what it was originally
supposed to match?
I tried to submit to:
http://www.clamav.net/lang/en/sendvirus/submit-fp/
but without the orginial file, all I get is an error message.
Do I really need to make the customer jump through the hoops?
What additional info will you need to confirm the F/P?
Thanks
--
Torge Husfeldt
Senior Anti-Abuse Engineer
Zentrales Abuse-Department (1&1 GMX Web.de)
1&1 Internet AG | Brauerstraße 50 | 76135 Karlsruhe | Germany
Phone: +49 721 91374-4795 | Fax: +49 721 91374-2982
E-Mail: torge.husfe...@1und1.de | Web: www.1und1.de
Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 6484
Vorstand: Ralph Dommermuth, Frank Einhellinger, Robert Hoffmann, Andreas
Hofmann, Markus Huhn, Hans-Henning Kettler, Uwe Lamnek, Jan Oetjen, Christian
Würst
Aufsichtsratsvorsitzender: Michael Scheeren
Member of United Internet
Diese E-Mail kann vertrauliche und/oder gesetzlich geschützte Informationen
enthalten. Wenn Sie nicht der bestimmungsgemäße Adressat sind oder diese E-Mail
irrtümlich erhalten haben, unterrichten Sie bitte den Absender und vernichten
Sie diese E-Mail. Anderen als dem bestimmungsgemäßen Adressaten ist untersagt,
diese E-Mail zu speichern, weiterzuleiten oder ihren Inhalt auf welche Weise
auch immer zu verwenden.
This E-Mail may contain confidential and/or privileged information. If you are
not the intended recipient of this E-Mail, you are hereby notified that saving,
distribution or use of the content of this E-Mail in any way is prohibited. If
you have received this E-Mail in error, please notify the sender and delete the
E-Mail.
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml
