here is declude log it did detect the virus, but why did it let it thru, and whithout changing the header
06/27/2003 18:26:58 Q8c09067a02886365 Scanner 1: Virus=: W32/[EMAIL PROTECTED] (corrupted) Attachment=15-10-GB.pdf.pif [3] I 06/27/2003 18:26:58 Q8c09067a02886365 Found a bogus .pif file 06/27/2003 18:26:58 Q8c09067a02886365 File(s) are INFECTED [: W32/[EMAIL PROTECTED] (corrupted): 3] 06/27/2003 18:26:58 Q8c09067a02886365 Scanned: CONTAINS A VIRUS [MIME: 2 8604] 06/27/2003 18:26:58 Q8c09067a02886365 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 216.226.209.71] 06/27/2003 18:26:58 Q8c09067a02886365 Subject: See todays hottest stars in their most intimate moments ----- Original Message ----- From: "Serge" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, June 28, 2003 3:23 AM Subject: Re: [Declude.Virus] ban ext not working > attached are the 2 part of imail log file, receiving and delivering > too long, to many recepients > maybe thats why it went thru ? > > banext did not work (it usualy works). > fprot did not catch bugbear, it does when i resend the same message ! > no declude junkmail or virus headers added. > > any help, hints, ... appreciated > thanks in advance > > > > > ----- Original Message ----- > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Saturday, June 28, 2003 12:20 AM > Subject: RE: [Declude.Virus] ban ext not working > > > > Below is the header > > it does say: > > > > Received: from Diaby [216.226.209.71] by cefib.com > > (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +0000 > > > > Doesn't this mean this is NOT an imail/webmessaging mail ? > > so why was it not scanned by declude ? no declude virus or junkmail > headers > > were added > > > > Received: from Diaby [216.226.209.71] by cefib.com > > (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +0000 > > From: [EMAIL PROTECTED] > > Subject: See todays hottest stars in their most intimate moments > > MIME-Version: 1.0 > > Content-Type: multipart/mixed; boundary="----------8SXJ1Q6JOLFJSQ" > > Message-Id: <[EMAIL PROTECTED]> > > Date: Fri, 27 Jun 2003 19:11:25 +0000 > > X-RCPT-TO: <[EMAIL PROTECTED]> > > Status: U > > X-UIDL: 352739436 > > Can you find that message in the Imail log, find what the Imail file name is > and post a log snippet of it? > > John Tolmachoff MCSE CSSA > Engineer/Consultant > eServices For You > www.eservicesforyou.com > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
