 |
 |
Not sure what time interval mail.msu.edu is running freshclam. We run ClamAV here as well, and it seems that we've been catching Worm.SCO.A since about 4pm. (We run freshclam every 5 minutes.) -Russell Tim Potter wrote: > Some of our staff are getting inundated with email with obviously infected > attachments that are slipping thru the mail.msu.edu AV software and our NAV > client software even after being updated w/ the latest virus defs. > > Any chance the mail.msu.edu server AV defs can get updated ASAP? > > Below is a typical example of what we're seeing. The usual file extensions > 'scr', 'pif', 'zip', etc. > > Thank you in advance for considering this, > Tim > >> Envelope-to: [log in to unmask] >> X-Sender: [log in to unmask] >> X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22 >> Date: Mon, 26 Jan 2004 16:22:34 -0500 >> To: [log in to unmask] >> From: David Brown <[log in to unmask]> >> Subject: Fwd: Delivery Status Notification (Failure) >> X-Virus: None found by Clam AV >> X-Spam-Level: >> X-Spam-Status: No, hits=0.3 required=5.0 tests=HTML_FONTCOLOR_BLUE, >> HTML_MESSAGE autolearn=no version=2.60 >> X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on >> sys02.mail.msu.edu >> >> Virus attached! As discussed DSB >> >> >>> Envelope-to: [log in to unmask] >>> From: [log in to unmask] >>> To: [log in to unmask] >>> Date: Mon, 26 Jan 2004 15:50:37 -0500 >>> X-DSNContext: 335a7efd - 4457 - 00000001 - 80040546 >>> Subject: Delivery Status Notification (Failure) >>> X-OriginalArrivalTime: 26 Jan 2004 20:50:42.0914 (UTC) >>> FILETIME=[1055B420:01C3E44E] >>> X-Virus: None found by Clam AV >>> >>> This is an automatically generated Delivery Status Notification. >>> >>> Delivery to the following recipients failed. >>> >>> [log in to unmask] >>> >>> >>> >>> Reporting-MTA: dns;mail4.freemarkets.com >>> Received-From-MTA: dns;usapghnet70 >>> Arrival-Date: Mon, 26 Jan 2004 15:50:32 -0500 >>> >>> Final-Recipient: rfc822;[log in to unmask] >>> Action: failed >>> Status: 5.1.1 >>> Received: from usapghnet70 ([10.1.0.95]) by mail4.freemarkets.com with >>> Microsoft SMTPSVC(5.0.2195.5329); >>> Mon, 26 Jan 2004 15:50:32 -0500 >>> Received: from msu.edu ([207.51.196.132]) by mail1.freemarkets.com with >>> Microsoft SMTPSVC(5.0.2195.6713); >>> Mon, 26 Jan 2004 15:50:26 -0500 >>> From: [log in to unmask] >>> To: [log in to unmask] >>> Subject: Mail Delivery System >>> Date: Mon, 26 Jan 2004 15:50:25 -0500 >>> MIME-Version: 1.0 >>> Content-Type: multipart/mixed; >>> boundary="----=_NextPart_000_0010_D2CF7F27.A2658E73" >>> X-Priority: 3 >>> X-MSMail-Priority: Normal >>> Return-Path: [log in to unmask] >>> Message-ID: <[log in to unmask]> >>> X-OriginalArrivalTime: 26 Jan 2004 20:50:26.0336 (UTC) >>> FILETIME=[06741A00:01C3E44E] >>> >>> The message cannot be represented in 7-bit ASCII encoding and has been >>> sent as a binary attachment. >> >> ------------------------------- >> David S. Brown >> MSU Alumni Association >> Toll-Free (877) MSU-ALUM >> FAX: (517) 355-5265 >> Web: www.msualum.com >> >> >