From clamav-users-bounces@lists.clamav.net Wed Aug 8 20:56:14 2007 Return-Path: X-Original-To: list@tad.clamav.net Delivered-To: list@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4pdc6o8n94pJ; Wed, 8 Aug 2007 20:56:14 +0200 (CEST) Received: from tad.clamav.net (localhost.localdomain [127.0.0.1]) by tad.clamav.net (Postfix) with ESMTP id 6900032410D; Wed, 8 Aug 2007 20:56:04 +0200 (CEST) X-Original-To: clamav-users@tad.clamav.net Delivered-To: clamav-users@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2CQePqGrQkTZ for ; Wed, 8 Aug 2007 20:56:02 +0200 (CEST) Received: from brassbounder.plus.com (brassbounder.plus.com [212.159.109.206]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by tad.clamav.net (Postfix) with ESMTP id F3637324051 for ; Wed, 8 Aug 2007 20:56:01 +0200 (CEST) Received: from rerun.localnet ([192.168.0.3] helo=[127.0.0.1]) by brassbounder.plus.com with esmtp (Exim 4.66) (envelope-from ) id 1IIqh1-0007HQ-AY; Wed, 08 Aug 2007 19:55:43 +0100 Message-ID: <46BA11A7.6010904@hepworthband.co.uk> Date: Wed, 08 Aug 2007 19:55:35 +0100 From: Jonathan Armitage Organization: Hepworth Band User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ClamAV users ML References: <12056326.post@talk.nabble.com> <46B9F0F5.4060808@roaringpenguin.com> <12057457.post@talk.nabble.com> <46B9F894.90307@roaringpenguin.com> <46B9FACC.60607@inetnw.com> <46B9FC01.1000309@roaringpenguin.com> <46B9FDA4.3060306@inetnw.com> In-Reply-To: X-Virus-Scanned: ClamAV 0.91/3897/Wed Aug 8 17:50:38 2007 on brassbounder.plus.com. X-SA-Exim-Connect-IP: 192.168.0.3 X-SA-Exim-Mail-From: jon.armitage@hepworthband.co.uk X-SA-Exim-Version: 4.2.1 (built Sun Jan 7 11:46:08 GMT 2007) X-SA-Exim-Scanned: Yes (on brassbounder.plus.com) Cc: Richard Moorhouse Subject: Re: [Clamav-users] Missed Virus X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net Jason Bennett wrote: > Hi everyone, > > We're using ClamAV on our mail gateway which is in front of our > exchange server. It's been running great for a long time and stops > thousands of virus per day for us. Lately however our McAfee which > is installed on exchange itself is picking up this virus: > > W32/Zhelatin.gen!eml > I hate to say "Me Too!", but I thought I should point out this is not an isolated incident. We have a similar set-up (0.90.3 on Solaris/Exim in fact), and the same virus got in and got picked up by McAfee this afternoon. Didn't I read somewhere recently that there have been a lot of new variants of this virus? Jon Systems Admin, 365 Media Group _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html