Here's the relevant area of the log. A couple of clean ones, the one caught by F-Prot, a few more clean, and the one caught by BANEXT.
Sorry, but I've already deleted the message files. 07/24/2002 12:24:49 Qf0f001a4012a32cf Scanned: Virus Free [MIME: 1 1164] 07/24/2002 12:26:06 Qf13c089f00965df3 Scanned: Virus Free [MIME: 1 9256] 07/24/2002 12:27:10 Qf17a081b007050c3 File(s) are INFECTED [3] 07/24/2002 12:27:10 Qf17a081b007050c3 Scanned: CONTAINS A VIRUS [MIME: 3 89055] 07/24/2002 12:27:42 Qf19a08500070cc10 Scanned: Virus Free [MIME: 2 10088] 07/24/2002 12:27:44 Qf19e01b5012adc42 Scanned: Virus Free [MIME: 1 5624] 07/24/2002 12:30:22 Qf23d0230012047aa Scanned: Virus Free [MIME: 1 638] 07/24/2002 12:30:42 Qf251087c0070982c Scanned: Virus Free [MIME: 3 993] 07/24/2002 12:30:46 Qf25508880070a731 Scanned: Virus Free [MIME: 1 983] 07/24/2002 12:30:54 Qf25d08940070c6e1 Scanned: Banned file extension. [MIME: 3 1 404] 07/24/2002 12:31:49 Qf29408fd00709cbd File(s) are INFECTED [0] 07/24/2002 12:31:49 Qf29408fd00709cbd Scanned: CONTAINS A VIRUS [MIME: 3 1690] 07/24/2002 12:33:37 Qf30009d3007041bc Scanned: Virus Free [MIME: 2 20906] 07/24/2002 12:39:46 Qf4710caa0070e25d Scanned: Virus Free [MIME: 1 1662] 07/24/2002 12:42:52 Qf52b032c012ab980 Scanned: Virus Free [MIME: 1 5355] 07/24/2002 12:45:34 Qf5cd0470012a34b6 Scanned: Virus Free [MIME: 1 171] 07/24/2002 12:48:15 Qf66d05b5012aa4f8 Scanned: Virus Free [UU: 1 0][MIME: 2 87] On Wed, 2002-07-24 at 13:19, R. Scott Perry wrote: > > >My exe filter caught a message with an attachment named picacu which is > >apparently one of the Klez variants. I am using F-Prot 3.12a with the > >latest defs and it caught another of the same virus. I thought that all > >of these should be caught by the anti-virus instead of BANEXT. Do I > >have something configured incorrectly or is something else causing this? > > The virus scanning does take priority over the BANEXT. > > What does the Declude Virus log file show for this E-mail? > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . -- Dan Shadix IT Systems Administrator Terry Reilly Health Services 208-318-1248 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
