>With PRESCAN it runs without a hitch (have only had to restart and
>clean up once). With PRESCAN off, then we have a problem coping
>with the load. I'm ranging about 0.7% of messages infected
>compared to some higher figures I have seen by others - Perhaps
>the prescanning feature cuts down on the number of detections
>(which would make sense if it does).
The prescanning shouldn't cut down on the number of detections. Although
viruses spread through HTML in E-mail are rare, there are a few that work
that way (such as the Kak/Worm virus). The prescanning is designed to
check the HTML to see if there is any potentially dangerous code in it
(such as scripts), and if so, it will pass it on to the scanner. But since
most HTML E-mails don't contain scripts or other potentially dangerous
code, most of the E-mails don't need to be scanned.
We're not aware of any viruses that can get past the prescanning, although
it could be possible. If anyone does know of a virus that bypasses the
prescanning, we would want to know about it, so we can update it.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
