the same happens here with f-prot for dos:

14:57:39.69 4 EXTFILTER(ANTIVIRUS) inp(39): * start virusscan for
Queue\1730292.msg
14:57:40.64 4 EXTFILTER(ANTIVIRUS) inp(97): * Found the W32/[EMAIL PROTECTED]
virus !!! in Queue\1730292.msg MCAFEE.
14:57:41.36 4 EXTFILTER(ANTIVIRUS) inp(54): * Message Queue\1730292.msg
seems to be clean (F-Prot)
14:57:45.31 4 EXTFILTER(ANTIVIRUS) inp(83): * identified I-Worm/Netsky.Q in
Queue\1730292.msg  AVG.


Adrian

-------------------------------------------------
----- Original Message -----
From: "Jonathan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 30, 2004 12:43 PM
Subject: Re: [Declude.Virus] Netsky.P Occasionally Slips through?


> I sent one. There have been several, not sure if the one I sent is
> indicative of all of them, but it's the only one I could easily get out of
> a local quarantine.
>
> Jonathan
>
> At 07:51 PM 3/29/2004, you wrote:
>
>
> >>F-Prot's manual scan results:
> >>C:\eudora\ATTACH\document_all02c.zip->document.txt
> >>  a security risk or a "backdoor" program
> >
> >That sounds like an exit code of 8, meaning that F-Prot detected a
> >suspicious file, but not a virus.
> >
> >Would it be possible to E-mail the .ZIP file to the declude.com
virustrap@
> >address, so we can analyze it?
> >
> >                                                    -Scott
> >---
> >Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> >since 2000.
> >Declude Virus: Ultra reliable virus detection and the leader in
mailserver
> >vulnerability detection.
> >Find out what you've been missing: Ask for a free 30-day evaluation.
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus
> >(http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.Virus mailing list.  To
> >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.Virus".    The archives can be found
> >at http://www.mail-archive.com.
> >
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
>
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to