the same happens here with f-prot for dos: 14:57:39.69 4 EXTFILTER(ANTIVIRUS) inp(39): * start virusscan for Queue\1730292.msg 14:57:40.64 4 EXTFILTER(ANTIVIRUS) inp(97): * Found the W32/[EMAIL PROTECTED] virus !!! in Queue\1730292.msg MCAFEE. 14:57:41.36 4 EXTFILTER(ANTIVIRUS) inp(54): * Message Queue\1730292.msg seems to be clean (F-Prot) 14:57:45.31 4 EXTFILTER(ANTIVIRUS) inp(83): * identified I-Worm/Netsky.Q in Queue\1730292.msg AVG.
Adrian ------------------------------------------------- ----- Original Message ----- From: "Jonathan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 30, 2004 12:43 PM Subject: Re: [Declude.Virus] Netsky.P Occasionally Slips through? > I sent one. There have been several, not sure if the one I sent is > indicative of all of them, but it's the only one I could easily get out of > a local quarantine. > > Jonathan > > At 07:51 PM 3/29/2004, you wrote: > > > >>F-Prot's manual scan results: > >>C:\eudora\ATTACH\document_all02c.zip->document.txt > >> a security risk or a "backdoor" program > > > >That sounds like an exit code of 8, meaning that F-Prot detected a > >suspicious file, but not a virus. > > > >Would it be possible to E-mail the .ZIP file to the declude.com virustrap@ > >address, so we can analyze it? > > > > -Scott > >--- > >Declude JunkMail: The advanced anti-spam solution for IMail mailservers > >since 2000. > >Declude Virus: Ultra reliable virus detection and the leader in mailserver > >vulnerability detection. > >Find out what you've been missing: Ask for a free 30-day evaluation. > > > >--- > >[This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.Virus mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.Virus". The archives can be found > >at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.