Hi,
If a second scan of the same e-mail/attachment will still not catch the
virus I *know* AV companies like f-prot would verry much like to get it from
you. I had something like that once a while ago. However, I let Declude
delete all mail identified as virus, so I did not have it for them anymore.
Met vriendelijke groet,
Bonno Bloksma
----- Original Message -----
From: "Scott Fisher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 23, 2004 3:54 PM
Subject: Re: [Declude.Virus] W32.Netsky.Q got through..
I've noticed that Virusscan does a better job of catching viruses in the
.ezip than F-Prot.
In my smaller world here, there will be 2-5 times a day .ezip viruses a day
that VirusScan catches that F-Prot does not.
Scott Fisher
Director of IT
Farm Progress Companies
>>> [EMAIL PROTECTED] 04/23/04 08:45AM >>>
> This morning when receiving message from our spam account (I hold
>everything instead of deleting then review), I received a message and
>attachment that Norton AV on my local machine caught as a Netsky.Q virus.
>This would have been delivered to the client had it not failed the spam
>tests.
> I'm running Declude v1.79 and F-Prot 3.14e with latest defs.
Anyone
>else seeing Netsky.Q's getting through? Luckily I haven't seen anymore
come
>through, but if you look at the virus logs, it sees it as virus free. UGH!
>Wish I could have caught it on my Linux VM so I could continue sending the
>message to the server to see when it finally catches it.
Are other copies of Netsky.Q getting caught? Do you have a line "BANEXT
EZIP" in your virus.cfg file?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus using f-prot and Sophos]
---
[This E-mail scanned for viruses by Declude Virus using f-prot and Sophos]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
