Viruses getting through

[Martin.Hepworth]

Paul
Was fixed last night in clamav, sophos has been detecting these fine for what its worth.

Can't say i've any in last 18 hours or so though.

-- 
martin

-----Original Message-----
From: Paul Welsh <paul at welshfamily.com>
Sent: 17 September 2008 22:01
To: mailscanner at lists.mailscanner.info
Subject: Viruses getting through

For the past few weeks I've had viruses getting through - the pesky ones
that claim to be flight confirmations, bank statements or some such with
small .zip files attached.  I'm sure you know about them.  Some are tagged
as spam but not all.

The headers of a recent one show that the message is classed as clean:

Received: from [217.45.162.11] by etrn.borusantelekom.com; Wed, 17 Sep 2008
09:17:36 +0000
Message-ID: <01c918a6$39323800$0ba22dd9 at ghw>
From: "Lindsey Avila" <ghw at borashipping.com>
Subject: Statement of fees 2008/09
Date: Wed, 17 Sep 2008 09:17:36 +0000
MIME-Version: 1.0
X-welshfamily-MailScanner: Found to be clean
X-welshfamily-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
	score=0.407, required 6, autolearn=disabled,
	XMAILER_MIMEOLE_OL_4B815 0.41)
X-welshfamily-MailScanner-From: ghw at borashipping.com
X-Spam-Status: No

I'm using clamav and bitdefender but although updated with the latest
definitions, it's probably ineffective because it's the free version v7.1.
Running freshclam yields this:

# freshclam
ClamAV update process started at Wed Sep 17 21:41:04 2008
main.cld is up to date (version: 48, sigs: 399264, f-level: 35, builder:
sven)
daily.cld is up to date (version: 8272, sigs: 28579, f-level: 35, builder:
ccordes)

Here's the version of clam:
# clamscan -V
ClamAV 0.94/8272/Wed Sep 17 21:16:02 2008

I'm running MailScanner version 4.71.10.

I did browse the archive of this list but couldn't find the answer.  Any
help appreciated.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************