What I am experiencing is that the server lets the virus go through the system. It scans and result is clean, the end user gets the email and their Symantec Enterprise snags it and tags it as [EMAIL PROTECTED]
On Thu, 2006-01-05 at 08:25 -0800, John T (Lists) wrote: > Is this what you are seeing? > > http://www.sophos.com/virusinfo/analyses/w32feebsa.html > > John T > eServices For You > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of JT > > Sent: Thursday, January 05, 2006 6:44 AM > > To: declude.virus@declude.com > > Subject: [Declude.Virus] Sober.X Variant > > > > Has anyone seen an influx of this virus come through? I've upgraded to > > the latest F-Prot and it seems like it still sneaking through. Although > > the Z variant is being stopped by F-prot. Any light that could be shed > > on this would be greatly appreciated. > > > > Also I've tried setting up ClamAV for Windows on our imail server as a > > scanner. I've got it to scan but it randomly generated an exit code of > > 50. Does anyone know what exit code 50 from ClamAV means? > > > > Thanks, > > JT > > > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
