Re: [Clamav-users] Gibe/Swen virus getting through

2003-09-25 Thread Jean-Sébastien Guay
Thanks again for your answer, > If you want trashscan to stop sending emails, > edit the trashscan file (remember is a shell script) and remove the > lines that creates the message I'm not talking about the virus message, I'm talking about the message that ClamAV sends to root saying "File succe

Re: [Clamav-users] Gibe/Swen virus getting through

2003-09-25 Thread Ray Slakinski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I can't answer the first question for you, but it is a good one... my best guess on it though is up until now, metamail was good enough to do the job. Gibe.F is a different beast that makes decoding more difficult. As for the file creation deal, if

Re: [Clamav-users] Gibe/Swen virus getting through

2003-09-25 Thread Jean-Sébastien Guay
Ray, > As suggested to me, use uudeview (see script for details) It makes a > world of difference! Thanks for the answer. That did seem to do the trick, at least for the 3 virii I've gotten since I've changed trashscan to use uudeview. First question: Why is this not mentioned in the README for

Re: [Clamav-users] Gibe/Swen virus getting through

2003-09-25 Thread Ray Slakinski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As suggested to me, use uudeview (see script for details) It makes a world of difference! However you may need to install uudeview on your system, my RH 7.1 did not have it installed by default. On Thursday, September 25, 2003, at 10:20 AM, Jean-Séb

[Clamav-users] Gibe/Swen virus getting through

2003-09-25 Thread Jean-Sébastien Guay
Hello, I have a setup where procmail passes messages through SpamAssassin, and then through clamav (using the trashscan 0.08 script). This is getting most spam and virii I get, but some still get through. I have compared some of those that get through with some of the ones that get caught by clama