I have a plesk server with DrWEB and SpamAssassin.

I have 1 domain out of over 100 that is getting hammered by the SOBER Virus.

Does anyone have a solution to stopping the message from getting 1) past the firewal or 2) past qmail. I don't think that I have qmail-scanner installed.

This domain had over a couple hundred infected messages today.

Sorry, but I don't know DrWeb. I don't use it. It sounds though like your DrWeb virus signature database may need to be updated though. They shouldn't be getting through!

As an alternative, I've always simply set up ClamAV on my servers. It works very well. I rarely see any virii getting through it, and even then only for maybe an hour or two until they've had a chance to update their virus sig files to detect a new virus strain.

There's a post from Ales around here somewhere that walks you through setting it up if you decide to go away from Dr Web. Or if you want a direct URL to the instructions, the most recent version is here.