Of course, I meant Password: in the body
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ipswitch Sent: Wednesday, March 03, 2004 2:19 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Declude Virus - Trend Pattern file 799 Of course they are going to get through. You password protected the file. Trend and if I am not mistaken, all others, do not scan the zip because it is password protected. What they do do is check to see if there is an exe (et.al.) inside and body of message that are inline with what the latest virus is doing. For instance message.zip with an exe inside and Password: in subject. It is more of a message footprint or content filter, not actually scanning the actual file. Eicar. Com that is password protected and zipped will always get through. Not sure what you are using at the gateway, but if you are using a TrendMicro product like IMSS then set the antivirus filter for password protected files to quarantine or delete instead of the default of deliver. Craig -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay Calvert Sent: Wednesday, March 03, 2004 1:19 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] Declude Virus - Trend Pattern file 799 Got Declude running and it is catching virus however, the Declude test is still getting through to me. I am running with Trend's # 799 file. But EICARENCODEDZIP and EICARDYNAMICENCODEDZIP and EICARZIP is too. Any help would be appreciated. Thanks --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
