Doc Schneider wrote: > All the ones I've been getting are all being caught with ClamAV. > > I get thousands of them per day too! > > Just my 2 cents. Are you using something like the sanesecurity add-on signatures? I'm using stock clamav 0.91.1 and it hasn't caught a single one.