Does mail marked as SPAM still get Clam scanned?

If a message is marked SPAM does it still get ClamAV scanned?

We had a user open a Word doc that was attached to a message in their junk mail which ended up being infected (straight doc file attached, not inside a zip file)

While the headers show it was marked for SPAM, nothing indicates the Word doc was scanned for viruses.

I'm running 13.3.5535, "Enabled ClamAV", last update "6/30/2015 4:06:48 AM"

I am not running ClamSUP.

Does ClamAV write a header for having checked a message/attachment(s)?

Any thoughts?

Brian Ellwood Replied

6/30/2015 at 9:00 AM

FWIW Clams SIGS don't show it as a virus so that sums up why it didnt get caught.

https://www.virustotal.com/en/file/fd996a992eea0ac33e842391dd083759461455bad3dfc6fb8e8586bf0666aa62/analysis/

I'm holding out for v14 to fix the issues with ClamAV before pushing up but I'm wonder if ClamSUP would have caught this?

1 Reply

Reply to Thread

Related Knowledge Base Articles

1 Reply

Reply to Thread

Tags

Related Knowledge Base Articles