Hmmm.. I ran it and got these results: Virus Log Analyzer 1.2 Report Date: 8/27/2003 10:48:57 AM Source Files: ******************************************* vir0820.log ********************************************************* Scan Summary -------------------------------------------- Total Emails Scanned = 3,477 Total Emails Clean = 3,477 Total Emails Infected= Percent of Emails Infected to Total Emails Scanned: 0.% --------------------------------------------------------- Virus Summary ------------------------------------------- ---------------------------------------------------------
But is you look at the first few lines of the log file: 08/20/2003 00:00:38 Qf2650ae File(s) are INFECTED [ W32/Sobig.F: 3] 08/20/2003 00:00:38 Qf2650ae Scanned: CONTAINS A VIRUS [MIME: 2 73519] 08/20/2003 00:00:41 Qf2680ae File(s) are INFECTED [ W32/Sobig.F: 3] 08/20/2003 00:00:41 Qf2680ae Scanned: CONTAINS A VIRUS [MIME: 2 72533] 08/20/2003 00:01:54 Qf2b10ae Scanned: Virus Free [MIME: 2 1043] 08/20/2003 00:02:18 Qf2c90ae Scanned: Virus Free [MIME: 2 35250] The first two lines show two messages containing the Sobig. Any suggestions? File->Full Count is turned on. I'm running this on a WinXP Pro machine (copied the logs from the server). --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.