On Wed, 18 Jan 2006, Jeffrey T Eaton wrote:

> From: Jeffrey T Eaton <[EMAIL PROTECTED]>
> To: info-cyrus@lists.andrew.cmu.edu
> Date: Wed, 18 Jan 2006 14:15:01 -0500
> Subject: Re: Spamming IP-Address: 202.80.59.3
> 
> > well, apart from the fact they are being distributed through
> > info-cyrus. although it has been much better recently, why is
> > info-cyrus the only mailing list i get viruses and spam through?
> > how hard is it to put a virus checker in place? dom
>
> A virus checker is in place.  We run ClamAV on all of our mail
> servers.  Sadly, this does not help when the signature doesn't
> come out promptly, and the messages are being sent with a (forged)
> from address of a valid subscriber.

That's why I prefer to run two virus checkers on all mail.
Sometimes one is quicker than the other at flagging up new viruses.
I believe commercial anti-virus companies, eg Messagelabs, will
similarly run mail through several virus checkers.  I suppose I'm
lucky in that we have a site license for Sophos.

Anyway the ClamAV signature for this particular virus was made
available last night.  ClamAV now detects this nasty as Worm.VB-9.
-- 
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
[EMAIL PROTECTED]               Phone: +44 1225 386101
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to