Mailscanner with Clamd

[Scott Silva]

on 3/4/2011 2:33 AM Barry Kwok spake the following:

> 
> On Fri, Mar 4, 2011 at 4:38 PM, garth <garthl at dcdata.co.za
> <mailto:garthl at dcdata.co.za>> wrote:
> 
>         Hi Guys
>>
>>     I dont think this is to do with Mailscanner but has anyone picked up
>>     this since last night. I have received 100's of messages from postmaster
>>     about these so called viruses. I have upgraded clam to 0.97 . Even txt
>>     files are being caught for this. Does anyone know if this is legit?
>>     Possibly a new trojan/virus that has spread?
>>
>>     Report: Clamd:  message was infected: MBL_144360.UNOFFICIAL 
>>     Report: Clamd: msg-32241-55.html was infected: MBL_144360.UNOFFICIAL
>>
> It is false positives from Sanesecurity
> 
> please read this thread
> 
> http://www.freelists.org/post/sanesecurity/False-positives-on-MBL-144360UNOFFICIAL
> 
> Barry
Actually, it is the malwarepatrol database. I stopped using it for now. You
should delete the mbl.ndb from your signature dir and stop dl'ing it until it
is resolved (If it gets resolved)