Using amavisd (installed around 8 January this year;
unsure what version) in conjunction with AVG. It's been
letting through copies of "Sober.G" (resulting in one
of our less PC-savvy users getting infected!).
The mail log on the server shows messages like the
following for the offending message:
May 25 17:26:16 biscotti amavis: (XXXZcEjS)
do_executable/do_unzip failed, ignoring: format error:
bad signature: 0x00905a4d at offset 0 in file
The attached file, when sent in an e-mail, triggers
this message and is delivered to the intended
recipient. Other virii are sucessfully stopped. DO NOT
RUN THE FILE INSIDE THIS ZIP - IT IS A VIRUS (Sober.G)!
I've upgraded to the latest version of Archive::Zip
(1.09) to no avail.