<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16608" name=GENERATOR>
<STYLE>@font-face {
font-family: Cambria Math;
}
@font-face {
font-family: Calibri;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; }
P.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
LI.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
DIV.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-compose
}
.MsoChpDefault {
mso-style-type: export-only
}
DIV.Section1 {
page: Section1
}
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=311282621-20022008>That's the one that's been discussed on list as being
corrupt. Search the list for subject "FW: [FP] possible corrupt
sanesecurity defs"</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=311282621-20022008></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=311282621-20022008>You may need to remove scan.ndb or manually kick off an
update and check to see if you have one that they have fixed (since it may not
be on all the mirrors yet)</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=311282621-20022008></SPAN></FONT> </DIV><FONT face=Arial
color=#0000ff size=2></FONT><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Vernon
Webb<BR><B>Sent:</B> Wednesday, February 20, 2008 4:10 PM<BR><B>To:</B>
mailscanner@lists.mailscanner.info<BR><B>Subject:</B> Infected message
m1KKY4eW011980 came from 127.0.0.1<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=Section1>
<P class=MsoNormal>I have had to stop MailScanner and am getting killed with
SPAM. For some reason I have been unable to send emails when MailScanner is
running, but not when Sendmail is running alone. So I have stopped MailScanner
and am now only running Sendmail (on a Fedora Core box). I have recently
upgraded MailScanner and am not sure that this is related as I didn't upgrade
today and today is when the problem seems to have started. When I look in my
logs I see this messages like a million times:<o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>Feb 20 15:34:06 ns MailScanner[10744]:
ClamAVModule::INFECTED:: Email.Hdr.Sanesecurity.07021900:: ./m1KKY4eW011980/
<o:p></o:p></P>
<P class=MsoNormal>Feb 20 15:34:07 ns MailScanner[10744]: Infected message
m1KKY4eW011980 came from 127.0.0.1<o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>Anyone have any ideas?<o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>Vernon Webb <o:p></o:p></P>
<P class=MsoNormal>(201) 703-1232 <o:p></o:p></P>
<P class=MsoNormal><A href="http://www.compwiz-designs.com/" target=_blank>web
designs</A> & <A href="http://www.comp-wiz.com/">web hosting</A> by
comp-wiz.com, inc. <o:p></o:p></P>
<P class=MsoNormal>Information in this transmission is privileged &
confidential. It is intended for the use of the individual or entity named
above. Any review, dissemination, disclosure, alteration, printing, circulation
or transmission of this email or it's attachments is prohibited and
unlawful.<o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P></DIV></BODY></HTML>