> >Which keyword do I need to add to the *.eml file to see which attachment > >(filename) was stopped? I have not been able to find an appropriate keyword > >but I might have missed it. > > You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a > virus is detected (not for banned file extensions). There is no equivalent > for banned files.
But %BANEXT% does show the extension caught. Scott, would it be possible to add a new variable, %ATTACHMENTS% that would show the file name of all attachments? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
