zero byte exe files filling quarantine, help!!

[Anthony Peacock]

Hi,

Jeff A. Earickson wrote:
> Gang,
> 
> I'm running beta version 4.58.7, and I've noticed this morning that
> a ton of stuff is getting dumped into my MailScanner quarantine 
> directory.  Everything that ends up there is a zero-byte exe
> file like "postcard.exe" or "Greeting Card.exe" (virus?), that generates 
> a quarantine message back to the sender.  These quarantine
> message will make MailScanner look **bad**.  Version 4.57.7 does this
> too.  Running sophos 4.14 and the latest clam.
> 
> The only quick fix I could think of was to change "Quarantine Infections"
> from yes to no.  Anybody else seeing this issue??

Me too.

I wondered why so many obviously bogus .exe files were getting caught by 
the filetype/filename rules but not the two virus scanners.  I just 
assumed that the viruses were mutating too quickly for the virus 
scanners to keep up, and was expecting to see them caught later on today 
or tomorrow.

After reading your email I checked my quarantine directory and this also 
contains lots of zero byte .exe files.

-- 
Anthony Peacock
CHIME, Royal Free & University College Medical School
WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
"If you have an apple and I have  an apple and we  exchange apples
then you and I will still each have  one apple. But  if you have an
idea and I have an idea and we exchange these ideas, then each of us
will have two ideas." -- George Bernard Shaw