Main Archive Page > Month Archives  > clamav-users archives

Re: [Clamav-users] Missed Virus

From: Dennis Peterson <dennispe_at_nospam>
Date: Thu Aug 09 2007 - 00:51:52 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>

Jason Bennett wrote:
> Hi everyone,
>
> We're using ClamAV on our mail gateway which is in front of our exchange server. It's been running great for a long time and stops thousands of virus per day for us. Lately however our McAfee which is installed on exchange itself is picking up this virus:
>
> W32/Zhelatin.gen!eml
>
> It seems our ClamAV is not seeing it. We get a couple hundred of these a day and they're all the same virus.
>
> Any ideas?
>

Is it possible it's only a partial message? It does happen that different tools looking at different parts of a message that is broken will see or miss the parts they use to identify a virus.

dp

---

Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html