Doc Schneider wrote:
> Loren Wilton wrote:
>> PDFinfo plugin from SARE helps a lot with the pdf mess.
>
> I found that ClamAV catches most all those greeting card spamscam viruses.
>
> But the PDFInfo from SARE works GREAT!
>

ClamAV does even better if you use the Sanesecurity, MSRBL, and MBL
signatures in addition to the main ClamAV signatures. We went from
rejecting a few thousand "viruses" a day with just the base ClamAV
signatures, to rejecting high 10's of thousands of messages a day
(mostly due to Sanesecurity). No complaints about false positives yet.