Klez not silent?

[Spicer, Kevin]

> Can you confirm that the batch of messages was only 1 
> message? If it was 2
> messages then the log lines would match what I expect. Otherwise there
> might be a bug in the Clam output parser. It was written by
> <adrian at smop.co.uk>.

Julian, I've noticed that Clam actually reports...

msg-29005-10.html contains Exploit.IFrame.HTML

As well as...

name.bat contains Worm/Klez.H 

For Klez infections (presumably why the log lines report two viruses found)  Could this be the reason (MS ignoring the Klez report, but still sending the message as it contains a non-silent 'virus' "Exploit.IFrame.HTML")?



BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.