Scott, Thanks for the info. We'll submit it to either Symantec or Inoculan and see what they have to say. Minmail virus from other IP addresses have since come in since then and been caught just fine, so I think it's safe to assume this is a dud but I want to know for sure.
Thanks, Rodney -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, August 11, 2003 1:02 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Minmail slipped through >Sorry, in my haste I didn't give you all the details. Yes, the minmail >slipped through Declude (running Inoculan) and past the desktop scanner >(Norton) without triggering either of them that it was a virus. Our user >recognized the text of the message and the message.zip attachment and >alerted us at once. > >I sent a copy to [EMAIL PROTECTED] for you to take a look at. We're >hoping it's a non-viable version and not a new strain we have to worry >about. In the meanwhile we're blocking all .zip files again. Unfortunately, if it passed through the scanner running on the desktop, there isn't much we can do as far as analysis goes -- this almost always means that Declude Virus is handling the E-mail properly (which is always our main concern). Our virus lab isn't set up to actually test viruses to see if they are fully functional; that is something that you would need to contact Norton and/or CA (for Inoculan) about. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
