Sophos AND ClamAV Missing Some?

Mike Kercher mike at CAMAROSS.NET
Fri Jan 30 01:54:25 GMT 2004


The characteristics look to be the same as the MyDoom...but it just gets
delete.  Does this look right?


Jan 29 19:44:27 avwall sendmail[10938]: i0U1iNwQ010938:
from=<lauralee11 at charter.net>, size=31189, class=0, nrcpts=1,
msgid=<200401300144.i0U1iNwQ010938 at avwall.bladeware.com>, proto=ESMTP,
daemon=MTA, relay=c66.169.156.15.ts46v-11.ftwrth.tx.charter.com
[66.169.156.15]
Jan 29 19:44:28 avwall MailScanner[17208]: New Batch: Scanning 1 messages,
31796 bytes
Jan 29 19:44:28 avwall MailScanner[17208]: Spam Checks: Starting
Jan 29 19:44:34 avwall MailScanner[17208]: Message i0U1iNwQ010938 from
66.169.156.15 (lauralee11 at charter.net) to americanmedical-id.com is spam,
SpamAssassin (score=9.992, required 5.8, BAYES_56 0.00, DCC_CHECK 2.91,
FROM_ENDS_IN_NUMS 0.99, MICROSOFT_EXECUTABLE 0.10, MISSING_MIMEOLE 1.59,
MSGID_FROM_MTA_SHORT 3.03, NO_REAL_NAME 0.16, PRIORITY_NO_NAME 1.21)
Jan 29 19:44:34 avwall MailScanner[17208]: Spam Checks: Found 1 spam
messages
Jan 29 19:44:34 avwall MailScanner[17208]: Spam Actions: message
i0U1iNwQ010938 actions are delete


Mike



More information about the MailScanner mailing list