Strange Virus Detected Messages

[Raymond Dijkxhoorn]

Hi!

> Report: F-Prot:
> /var/spool/MailScanner/incoming/4958/j42J8XdD005496/msg-4958-7.html
> Infection: HTML/ObjData at expl
>
> After querying users, it seems these messages could be false negatives.
>
> I am using both Clam AV and F-Prot - however ONLY F-Prot reports on
> this.
> (If I turn off F-Prot - no messages)

Most likely related to:

196     (first @ 19:01:16, last = 21:53:36)     Worm.Sober.P

Started about the same time

2047    (first @ 19:06:47, last = 21:57:20)     HTML/ObjData at expl

> I proceeded to update Clam AV to the latest version .84 and F-Prot to
> the latest 4.5.4. with the same result.
>
> Is this a MailScanner issue or is this a genuine Infection that F-Prot
> is seeing?

As far as we could tell, yes.

Bye,
Raymond.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!