It could also be another case of Declude's MIME decoder garbling an imperfect MIME attachment to the point that the command line decoder can't recognize the virus. If you still have the virus file in your mailbox, be certain NOT to delete it so that Scott can inspect it.
I see that at least 50 - 60% of the the queue IDs in my virus log are messages indicating that there was a premature end of the MIME header. Until we are able to isolate those messages and can convince myself of the contrary, I will remain suspicious that this could be indicative of viruses slipping by. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dean Zingle, Ipswitch.ca Sent: Monday, March 18, 2002 12:27 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] F-Prot not catching W95/FBound.c@mm Warning: We just noticed that F-Prot running on our mail server under Declude let through the W95/FBound.c@mm virus named as an attachment patch.exe yet it was caught immediately by F-Prot's Real Protector on the desktop. Both installations of F-Prot are displaying the same set of macro definitions and no updates from F-Prot were available when checking immediately after the virus was allowed through. Has anyone else noticed F-Prot missing viruses with the command line scanner that were then caught with the Real Protector? Date: Mon, 18 Mar 2002 11:52:22 -0500 (EST) From: [EMAIL PROTECTED] X-Envelope-From: [EMAIL PROTECTED] X-Envelope-To: [EMAIL PROTECTED] TO: [EMAIL PROTECTED] SUBJECT: Important X-RCPT-TO: <[EMAIL PROTECTED]> Optrics Inc. and FundSoft - Canadian Ipswitch Premier Partners Email: [EMAIL PROTECTED] Website: www.Optrics.com Snail: Suite 100 4911 - 114 St. Edmonton, AB, Canada, T6H 3L5 Tel:(780) 466-6016 Toll Free: 1-877-386-3763 Fax:(780) 432-5630 Solutions for a Connected World: www.Optrics.com/linecard.htm ____________________________________________________________________________ _______ IMail Server has scanned this e-mail for viruses using Declude Virus from Optrics.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
