Uh - thanks. I was afraid that there was some legitimate use for that line. Darn.
Of course, you COULD change the header to use a different header name and/or a slightly different message to distinguish your legitimate mails from the virus generated ones. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 http://www.HM-Software.com/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Squib Sent: Wednesday, August 20, 2003 05:39 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] X-MailScanner line So you're saying if I send you an email from my Linux servers... which IS running MailScanner, then I am guilty by association and it is assumed to be an infected message to be deleted? I manage 4 Linux mail servers for different companies and they all run SendMail/MailScanner/Spam Assassin. Oh Yeah, I also manage mail services for a large ISP, rumming Imail/Declude JM & Virus. See http://www.mailscanner.info Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of i360 Support Sent: Wednesday, August 20, 2003 5:36 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] X-MailScanner line It is put there by the Sobig.F virus. So if you see it, that means it is an infected mail. ----- Original Message ----- From: Bonno Bloksma To: [EMAIL PROTECTED] Sent: Wednesday, August 20, 2003 4:16 PM Subject: [Declude.Virus] X-MailScanner line Hi, I''ve found this line in some mails but can not determine which program put it there. X-MailScanner: Found to be clean The reason I realy want to know is because this line was in several virusinfected e-mails. So, which program decided the e-mail was clean, and it what sense was it clean? Groetjes, Bonno Bloksma .... Back up my hard drive? How do I put it in reverse? --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
