Subject: ClamAV detected as SophosSavi in logwatch

[Mike Tremaine]

On Fri, 2006-08-04 at 12:06 +0100, mailscanner-
request at lists.mailscanner.info wrote:

> I never install Sophos, but in LogWatch entry of my mailscanner it say it
> this.
> 
> Entry in LogWatch :
> SophosSavi Virus Report: (Total Seen = 1081)
>     Exploit.HTML.IFrame: 204 Times(s)
>     HTML.Phishing.Auction-149: 1 Times(s)
>     HTML.Phishing.Bank-623: 103 Times(s)
>     HTML.Phishing.Bank-626: 2 Times(s)
>     HTML.Phishing.Bank-627: 78 Times(s)
>     Worm.Bagle.Gen-zippwd-5: 2 Times(s)
>     Worm.Bagle.pwd-eml: 9 Times(s)
>     Worm.Mydoom.I: 24 Times(s)
>     Worm.Mytob.FN: 302 Times(s)
>     Worm.Mytob.NK: 18 Times(s)
>     Worm.SomeFool.AA-2: 2 Times(s)
>     Worm.SomeFool.P: 332 Times(s)
>     Worm.VB-9: 4 Times(s)


That is a Logwatch problem not a Mailscanner problem. If you can tell me
which version of Logwatch you are running [and MailScanner/ClamAV] I'll
take a look. [FYI current stable Logwatch is 7.3].

You can send this to me directly or to the logwatch at logwatch org
list.

-Mike