ClamAVModule ignoring MyDoom-O - eek!

[John Hinton]

<x-flowed>
Brett Charbeneau wrote:

>Greetings all,
>
>        I am running MS 4.31.6 on a 2.4.26 kernel box, and have installed
>clamav-0.75 as per the instructions at:
>
>http://www.sng.ecs.soton.ac.uk/mailscanner/install/ClamAVModule.shtml
>
>
>
I posted here yesterday, after a visit to the ClamAV forums, that so far
they have been unable to find any operational virus attached to any
mydoom.o version. In other words, the attachment is broken and does not
execute any malicious code. They have so far ignored writing any sigs
(yesterday anyway) since these are not really viruses... or as one
person put it... they were 'dead' viruses or fragmented viruses and so
far totally harmless. Seems the concensus was to not write sigs
(bloatware) for viruses that weren't really viruses.

Makes sense to me!

John Hinton

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
</x-flowed>