Re: [Exim] ClamAV + exiscan missing virus

On (2003/11/03 04:08), Kevin Reed wrote:

> I just grabed the copy of the zip file you had (first I've had a chance to
> actually touch it)... Sent it in a message from my home account and fired
> it off to my Exim server...
>
> Using Exim 4.24 + Exiscan 4.24-13 with ClamAV 0.60 and SpamAssassin 2.60...
>
> 2003-11-03 03:57:51 1AGcP5-0000X1-GO H=fed1mtao07.cox.net [68.6.19.124]
> Warning: DISCARD VIRUS: This message was found to contain malware
> (Worm.Mimail.C)
[...]
> However... Checking logs on all the Exim systems I can touch, I don't see
> any evidence of this either being caught or being accepted... [...]

Well, that log excerpt is evidence of the malware being identified. :-)

So what you're seeing and what I'm seeing differ significantly, which is
unfortunate. If it were broken for everyone, I'd just wait for a fix.
:-)

Thanks for the datapoint, I'll keep looking.

Ciao,
Sheldon.