Hmmm.. I ran it and got these results:
Virus Log Analyzer 1.2 Report Date: 8/27/2003 10:48:57 AM
Source Files: *******************************************
vir0820.log
*********************************************************
Scan Summary --------------------------------------------
Total Emails Scanned = 3,477
Total Emails Clean = 3,477
Total Emails Infected=
Percent of Emails Infected
to Total Emails Scanned: 0.%
---------------------------------------------------------
Virus Summary -------------------------------------------
---------------------------------------------------------
But is you look at the first few lines of the log file:
08/20/2003 00:00:38 Qf2650ae File(s) are INFECTED [ W32/Sobig.F: 3]
08/20/2003 00:00:38 Qf2650ae Scanned: CONTAINS A VIRUS [MIME: 2 73519]
08/20/2003 00:00:41 Qf2680ae File(s) are INFECTED [ W32/Sobig.F: 3]
08/20/2003 00:00:41 Qf2680ae Scanned: CONTAINS A VIRUS [MIME: 2 72533]
08/20/2003 00:01:54 Qf2b10ae Scanned: Virus Free [MIME: 2 1043]
08/20/2003 00:02:18 Qf2c90ae Scanned: Virus Free [MIME: 2 35250]
The first two lines show two messages containing the Sobig. Any
suggestions? File->Full Count is turned on. I'm running this on a WinXP
Pro machine (copied the logs from the server).
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
