Kami, scan the raw D*.SMD file from the command prompt with the same virus scanners and switches you use in you virus.cfg file and see if it is detected then. Just curious to see what your results are...
Bill ----- Original Message ----- From: "Kami Razvan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 20, 2004 11:42 AM Subject: RE: Re[6]: [Declude.Virus] testvirus.org #22 > Hi Andrew: > > I turned if off and it still got through. > > ======================================== > This test message contains: > > Test #17: Eicar virus hidden using the "CR Vulnerability" (attachment can be > opened by all versions of Microsoft Outlook and Outlook Express) > > If your mail server's virus scanner did not detect this email, it allows > some viruses through! Please note: This test message uses the EICAR test > virus, which is completely benign and contains no viral code. For more > information see: http://www.eicar.org > ======================================== > > & Here is the log file entry: > > 12/20/2004 14:31:52 Q289d047602741527 Scanned: Virus Free > > So it appears to be virus free.. > > Regards, > Kami > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew > Sent: Monday, December 20, 2004 2:24 PM > To: [EMAIL PROTECTED] > Subject: RE: Re[6]: [Declude.Virus] testvirus.org #22 > > What happens when you set: > > PRESCAN OFF > > ...? > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
