If you use McAfee.. Then Exclude C:\Temp - if you are not doing it then you will have other errors.
McAfee moves a copy of the virus to that directory before dealing with it. We proved it and added it. We exclude: User mailbox drive Spool drive & C:\temp Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Thursday, February 26, 2004 2:31 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Another error I was able to save the eicar virus to the spool directory Can't see a pattern happening many emails, not all will try to exclude temp directory as kami suggested attached is a zipped log, maybe you can spot a pattern > > > > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, February 26, 2004 3:25 PM > Subject: Re: [Declude.Virus] Another error > > > > > > >I have Mcafee on access scanner, but i specificaly exclude the > > >imail & > the > > >spool directory and all their subdirectories Regarding the backup, > > >the error in occuring all day long, while we only > run > > >the backup once a day, so it cannot be that > > > > Do you know if this is happening for all E-mails, or just some? Is there > > any pattern that you can see (happening at certain times of the day, every > > X hours, just for E-mails with viruses, etc.)? > > > > Also, I would suggest copying the eicar.com file (you can download > > it from > > http://www.eicar.org ) to the \IMail\spool directory, and seeing if > > you > are > > able to then open it with Notepad. If not, the AV program is > > actually intefering somehow. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail > > mailservers since 2000. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
