I was able to save the eicar virus to the spool directory
 Can't see a pattern  happening
 many emails, not all
 will try to exclude temp directory as kami suggested
 attached is a zipped log, maybe you can spot a pattern

>
>
>
> ----- Original Message ----- 
> From: "R. Scott Perry" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, February 26, 2004 3:25 PM
> Subject: Re: [Declude.Virus] Another error
>
>
> >
> > >I have Mcafee on access scanner, but i specificaly exclude the imail &
> the
> > >spool directory and all their subdirectories
> > >Regarding the backup, the error in occuring all day long, while we only
> run
> > >the backup once a day, so it cannot be that
> >
> > Do you know if this is happening for all E-mails, or just some?  Is
there
> > any pattern that you can see (happening at certain times of the day,
every
> > X hours, just for E-mails with viruses, etc.)?
> >
> > Also, I would suggest copying the eicar.com file (you can download it
from
> > http://www.eicar.org ) to the \IMail\spool directory, and seeing if you
> are
> > able to then open it with Notepad.  If not, the AV program is actually
> > intefering somehow.
> >
> >                                                     -Scott
> > ---
> > Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> > since 2000.
> > Declude Virus: Catches known viruses and is the leader in mailserver
> > vulnerability detection.
> > Find out what you've been missing: Ask for a free 30-day evaluation.
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".    The archives can be found
> > at http://www.mail-archive.com.
> >
>


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to