What the hell is going on - SOBIG.F

[Shawn Tayler]

On Sun, 31 Aug 2003 13:38:29 -0400 (EDT) Gerry Doris <gerry at dorfam.ca>
professed:

> I even tried scanning my quarantine directory and ClamAV still misses the
> virus.  Yes. I'm using the latest ClamAV signatures.
> 
> I suspect these virii are coming through the list.  I could be wrong
> since Sobig forges the headers but I think they're slipping through.

Yes,

ClamAV is definitely missing some variants of the SoBig.  I have 5 examples
here that it fails to ID but rav gets them each time....