If I'm reading the e-mail and the logs correctly, declude / f-prot did scan that e-mail, and it passed.
I'll keep my eyes much more open today! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Tuesday, October 01, 2002 11:54 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Bugbear made it past declude / f-prot >Declude / f-prot caught 5 different variants of eicar. > >Using Lite version, don't have per user settings available to me. > >I believe that I was able to isolate the e-mail that contained the >virus. It does not appear to have the "scanned by Declude Virus" >message appended to it, which leads me to believe that maybe declude >didn't submit it to f-prot? It does have headers that indicate that >declude junkmail did its thing. Have you checked the \IMail\spool\vir####.log file, to see what it reports for that E-mail? That should provide a clue. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
