Martin, Jeremy wrote:
Anyone else having a few Zafi.B's slip through?
We have a couple SMTP-only anti-spam/virus mail servers which are
running qmail-scanner/SA/clamd (running freshclam every hour), which
then forward messages to our "real" mail servers running vpopmail etc.
On our scrubbers I see about 440 "Worm.Zafi.B" have been caught since
last Friday.
However, one of our vpopmail servers which is running TrendMicro's ServerProtect, is finding the virus in "PE_ZAFI.B" in quite a few messages that have made it past our scrubbers. I have never touched ServerProtect before and unfortunately right now its deleting the infected messages without quarantining them so I can't even look at their headers at the moment.
Cheers Jeremy
Jeremy,
If clamav is really up to date (latest clamav version, and latest defs), it might have problems recognizing this worm. Perhaps there is variant which clamav does not _yet_ detect.
You can submit a sample here (if latest version/defs do not detect it: http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi
Regards,
Niek
------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
