Viruses apparently getting through

[Jeff A. Earickson]

Sigh.  I think this is another OS-specific instance of Clam failing
to catch Sober.U, noted by me earlier this week in this list.
Try using the latest CVS version of Clam to see if this solves your
problem.

Jeff Earickson
Colby College

On Sat, 3 Dec 2005, Gib Gilbertson Jr. wrote:

> Date: Sat, 3 Dec 2005 13:21:13 +1000
> From: Gib Gilbertson Jr. <gib at TMISNET.COM>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Viruses apparently getting through
> 
> Hi.
>
> I seeing a lot of e-mails getting through that are caught by ZoneAlarm 
> Security Suite and reported to be infected by the Win32.Sober.W!.ZIP virus. 
> These are coming in as attachments with the extension .zm9 as reported by 
> ZoneAlarm.
>
>
> I am running the following on FreeBSD 4.10
>
> MailScanner 4.32.4
> ClamAV 0.87.1/1200
>
> I've added a file types rule to deny \.zm9$ files
>
> I'm still getting them in e-mail though.
>
> Any thoughts?
>
> Thanks
>
> gib
>
>
>
>     Gib Gilbertson Jr.
>     Tierramiga Info Systems
>     619-287-8647 Support
>     http://www.tmisnet.com
>     San Diego's Friendly ISP
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!