Not sure what time interval mail.msu.edu is running
freshclam. We run ClamAV here as well, and it seems
that we've been catching Worm.SCO.A since about 4pm.
(We run freshclam every 5 minutes.)
-Russell
Tim Potter wrote:
> Some of our staff are getting inundated with email with obviously infected
> attachments that are slipping thru the mail.msu.edu AV software and our NAV
> client software even after being updated w/ the latest virus defs.
>
> Any chance the mail.msu.edu server AV defs can get updated ASAP?
>
> Below is a typical example of what we're seeing. The usual file extensions
> 'scr', 'pif', 'zip', etc.
>
> Thank you in advance for considering this,
> Tim
>
>> Envelope-to: [log in to unmask]
>> X-Sender: [log in to unmask]
>> X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
>> Date: Mon, 26 Jan 2004 16:22:34 -0500
>> To: [log in to unmask]
>> From: David Brown <[log in to unmask]>
>> Subject: Fwd: Delivery Status Notification (Failure)
>> X-Virus: None found by Clam AV
>> X-Spam-Level:
>> X-Spam-Status: No, hits=0.3 required=5.0 tests=HTML_FONTCOLOR_BLUE,
>> HTML_MESSAGE autolearn=no version=2.60
>> X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
>> sys02.mail.msu.edu
>>
>> Virus attached! As discussed DSB
>>
>>
>>> Envelope-to: [log in to unmask]
>>> From: [log in to unmask]
>>> To: [log in to unmask]
>>> Date: Mon, 26 Jan 2004 15:50:37 -0500
>>> X-DSNContext: 335a7efd - 4457 - 00000001 - 80040546
>>> Subject: Delivery Status Notification (Failure)
>>> X-OriginalArrivalTime: 26 Jan 2004 20:50:42.0914 (UTC)
>>> FILETIME=[1055B420:01C3E44E]
>>> X-Virus: None found by Clam AV
>>>
>>> This is an automatically generated Delivery Status Notification.
>>>
>>> Delivery to the following recipients failed.
>>>
>>> [log in to unmask]
>>>
>>>
>>>
>>> Reporting-MTA: dns;mail4.freemarkets.com
>>> Received-From-MTA: dns;usapghnet70
>>> Arrival-Date: Mon, 26 Jan 2004 15:50:32 -0500
>>>
>>> Final-Recipient: rfc822;[log in to unmask]
>>> Action: failed
>>> Status: 5.1.1
>>> Received: from usapghnet70 ([10.1.0.95]) by mail4.freemarkets.com with
>>> Microsoft SMTPSVC(5.0.2195.5329);
>>> Mon, 26 Jan 2004 15:50:32 -0500
>>> Received: from msu.edu ([207.51.196.132]) by mail1.freemarkets.com with
>>> Microsoft SMTPSVC(5.0.2195.6713);
>>> Mon, 26 Jan 2004 15:50:26 -0500
>>> From: [log in to unmask]
>>> To: [log in to unmask]
>>> Subject: Mail Delivery System
>>> Date: Mon, 26 Jan 2004 15:50:25 -0500
>>> MIME-Version: 1.0
>>> Content-Type: multipart/mixed;
>>> boundary="----=_NextPart_000_0010_D2CF7F27.A2658E73"
>>> X-Priority: 3
>>> X-MSMail-Priority: Normal
>>> Return-Path: [log in to unmask]
>>> Message-ID: <[log in to unmask]>
>>> X-OriginalArrivalTime: 26 Jan 2004 20:50:26.0336 (UTC)
>>> FILETIME=[06741A00:01C3E44E]
>>>
>>> The message cannot be represented in 7-bit ASCII encoding and has been
>>> sent as a binary attachment.
>>
>> -------------------------------
>> David S. Brown
>> MSU Alumni Association
>> Toll-Free (877) MSU-ALUM
>> FAX: (517) 355-5265
>> Web: www.msualum.com
>>
>>
>
|