Jonathan
At 06:43 AM 2/25/2004, you wrote:
I realize this generally does mean it's corrupt -- but you're missing the "scary" part. If I scan the file that came in with the same install of F-Prot, (from the mail server), it catches it as Netsky.
If scanning it from F-Prot on the mailserver catches it, it should get caught when Declude Virus calls F-Prot (assuming that F-Prot is working, the eicar.com file gets caught, and there are no messages in the log file when the E-mail with the virus is scanned).
We aren't aware of any cases where the same copy of F-Prot with the same virus definitions will catch an attachment that passes through Declude Virus. Is it possible that the virus definitions were updated after the E-mail first arrived?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
