Hi, If a second scan of the same e-mail/attachment will still not catch the virus I *know* AV companies like f-prot would verry much like to get it from you. I had something like that once a while ago. However, I let Declude delete all mail identified as virus, so I did not have it for them anymore.
Met vriendelijke groet, Bonno Bloksma ----- Original Message ----- From: "Scott Fisher" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, April 23, 2004 3:54 PM Subject: Re: [Declude.Virus] W32.Netsky.Q got through.. I've noticed that Virusscan does a better job of catching viruses in the .ezip than F-Prot. In my smaller world here, there will be 2-5 times a day .ezip viruses a day that VirusScan catches that F-Prot does not. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 04/23/04 08:45AM >>> > This morning when receiving message from our spam account (I hold >everything instead of deleting then review), I received a message and >attachment that Norton AV on my local machine caught as a Netsky.Q virus. >This would have been delivered to the client had it not failed the spam >tests. > I'm running Declude v1.79 and F-Prot 3.14e with latest defs. Anyone >else seeing Netsky.Q's getting through? Luckily I haven't seen anymore come >through, but if you look at the virus logs, it sees it as virus free. UGH! >Wish I could have caught it on my Linux VM so I could continue sending the >message to the server to see when it finally catches it. Are other copies of Netsky.Q getting caught? Do you have a line "BANEXT EZIP" in your virus.cfg file? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.