>Declude / f-prot caught 5 different variants of eicar.
>
>Using Lite version, don't have per user settings available to me.
>
>I believe that I was able to isolate the e-mail that contained the
>virus. It does not appear to have the "scanned by Declude Virus"
>message appended to it, which leads me to believe that maybe declude
>didn't submit it to f-prot? It does have headers that indicate that
>declude junkmail did its thing.
Have you checked the \IMail\spool\vir####.log file, to see what it reports
for that E-mail? That should provide a clue.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.