I just received a virus hoax ("life is beautiful") forwarded from one of my users, so I sent results of my google (including Snopes and BreakTheChain) upstream to previous recipients. Now I'm wondering why Clam (configured in MD) doesn't treat hoaxes, like phish, as just another virus. Is there some other system that's targeted at stopping hoaxes?