Hi Scott: I was under the impression that if I put:
SKIPIFVIRUSNAMEHAS Sobig In the recip.eml then the recipient of the virus will not be alerted if Sobig is the virus. This works fine for Sobig but I noticed that I am not receiving a virus notification for other viruses as well. So I tested the Eicar virus with the above in the recip.eml and without it. With that line in the recip.eml I do not get a notification for Eicar and without it I get a notification. Is this a feature, bug, or a misunderstaing on my part... Or possibly all of the above? :) Regards, Kami -----Original Message----- From: Postmaster [mailto:[EMAIL PROTECTED] Sent: Saturday, September 06, 2003 12:33 PM To: [EMAIL PROTECTED] Subject: WARNING: YOU WERE SENT A VIRUS The Declude Virus software [Ver: 1.75i4] on durability.com has reported that you were sent an E-mail from [EMAIL PROTECTED], containing the : EICAR test file NOT a virus. virus in the eicar.com attachment. The subject of the E-mail was "Test eicar.com file [eicarplain]". The E-mail containing the virus has been quarantined to prevent further damage. Headers Follow: Received: from www.declude.com [216.58.174.203] by foroosh.com (SMTPD32-8.02) id AC4015021C; Sat, 06 Sep 2003 12:33:04 -0400 X-Web-Originating-IP: 12.5.16.247 Message-Id: <[EMAIL PROTECTED]> X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 02 Nov 2000 20:23:17 -0500 From: "WebMaster" <[EMAIL PROTECTED]> To: "User" <[EMAIL PROTECTED]> Subject: Test eicar.com file [eicarplain] Mime-Version: 1.0 Content-Type: multipart/mixed; BounDary="=====================_307115168==_" --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
