Ok, Yes I'm running Sophos. Scott, on a previous email that you wrote to me
on Wednesday night I was reporting a error code 2 because of the bagle virus
encrypted zip file. You said I should use the VIRUSCODE 2. Here is the email
before:
I'm guessing that the "Error 2" from Sophos means that Sophos detected an
encrypted .ZIP file.
If you add a line "VIRUSCODE 2" to the \IMail\Declude\virus.cfg file, it
should take care of this.
-Scott
At 07:30 PM 3/3/2004, Dave Czoper wrote:
>Scott, Would this help. The virus log is giving me a
>Error 2 in the virus scanner
>scanned:error in virus scanner. [MIME: 2 998]
>
Should I still take out the viruscode 2?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Friday, March 05, 2004 8:58 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Virus log
>03/05/2004 08:12:14 Q7cae0ec702baecc7 Could not find parse string >>>
>Virus in report.txt
>03/05/2004 08:12:14 Q7cae0ec702baecc7 File(s) are INFECTED [: 2]
>03/05/2004 08:12:14 Q7cae0ec702baecc7 Scanned: CONTAINS A VIRUS [MIME: 2
5390]
>
>What does could not find parse string mean? I got a postmaster stating
>that declude reported a unknown virus. The email didn't contain a
>attachment. Any thoughts?
In this case, your virus scanner is returning an error code of 2. It looks
like you are using Sophos -- in that case, an error code of 2 means that an
error occurred in Sophos that preventing scanning from
occurring. Therefore, it does not generate the report.txt file, so Declude
Virus can't find the virus name. Since no virus was detected, Declude
Virus won't be able to report a virus name.
I would recommend *not* using a line "VIRUSCODE 2" in your
\IMail\Declude\virus.cfg file.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
