Hello R., Thursday, August 21, 2003, 2:59:18 PM, you wrote:
>>I did that with eicar and the On-Demand Scanner picked it up. However, when >>I did it with Sobig.F, there was no attachment. Then I noticed that it was a >>bounced message from another server (not using SKIPIFVIRUSNAMEHAS). I'm now >>wondering if that is why McAfee On-Demand/Declude is not picking it up, >>because the virus is part of the bounced message and it appears to not be >>executable. However, F-Prot and McAfee On-Access both detect Sobig.F in the >>SMD file. ?? RSP> Most AV programs will not detect corrupt, non-viable variants, which often RSP> includes bounce messages (because those bounce messages are usually truncated). RSP> -Scott RSP> --- RSP> Declude JunkMail: The advanced anti-spam solution for IMail mailservers. RSP> Declude Virus: Catches known viruses and is the leader in mailserver RSP> vulnerability detection. RSP> Find out what you have been missing: Ask for a free 30-day evaluation. We started seeing something similar about 2:00 a.m. I started getting warnings Trend that it was picking up viruses in my /spam folder. Don't know how many going through because can't scan the /spool with Trend. Trying to figure out if they're non-viable. Even if they are Declude/F-prot should be stopping them though because we had a similar problem a few weeks ago and added VIRUSCODE 8 in order to stop suspicious files. -David -- Best regards, David mailto:[EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
