I've noticed that Virusscan does a better job of catching viruses in the .ezip than 
F-Prot. 
In my smaller world here, there will be 2-5 times a day .ezip viruses a day that 
VirusScan catches that F-Prot does not.

Scott Fisher
Director of IT
Farm Progress Companies

>>> [EMAIL PROTECTED] 04/23/04 08:45AM >>>

>         This morning when receiving message from our spam account (I hold
>everything instead of deleting then review), I received a message and
>attachment that Norton AV on my local machine caught as a Netsky.Q virus.
>This would have been delivered to the client had it not failed the spam
>tests.
>         I'm running Declude v1.79 and F-Prot 3.14e with latest defs.  Anyone
>else seeing Netsky.Q's getting through?  Luckily I haven't seen anymore come
>through, but if you look at the virus logs, it sees it as virus free.  UGH!
>Wish I could have caught it on my Linux VM so I could continue sending the
>message to the server to see when it finally catches it.

Are other copies of Netsky.Q getting caught?  Do you have a line "BANEXT 
EZIP" in your virus.cfg file?

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to