Re: [Declude.Virus] MyDoom.o's slipping through.

[Matt]

That actually shows that it was scanned and reported as being virus free.  It is not uncommon for new viruses to go undetected, and also to have damaged viruses go undetected while having a desktop scanner pick them up even though they can't infect a computer.  Some viruses are very prone to being damaged.  Also, while McAfee might have picked this up as MyDoom.O, it's not uncommon for new viruses to be recognized by some scanners as old ones, at least before the definitions are updated, so this could have been brand new. My recommendation would be to make sure that you are updating your definitions on an hourly basis and also think about adding a second scanner if things like this are going to cause problems for your clients and business. Matt Chris Patterson wrote: Log Files: 10/19/2004 12:58:45 Q47c21ade0114a44b MIME file: [EMAIL PROTECTED] [base64; Length=29144 Checksum=3153474] 10/19/2004 12:58:46 Q47c21ade0114a44b Scanned: Virus Free [MIME: 2 31672] Thanks, Chris Patterson, CCNA Network Engineer -----Original Message----- From: Matt [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 21, 2004 12:51 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] MyDoom.o's slipping through. Chris, It's always helpful to share the actual lines of your log when asking a question such as this. That will clear up any possible misperceptions and allow one to focus on what happened. Matt Chris Patterson wrote: I have had two reports in the last 2 days about a virus coming through. The customer forwarded these to me on an Exchange mailbox using Mcaffee which identified them as MyDoom.o. Tracing the Logs, they were scanned and Deemed Virus Free using Prescan. Anyone have this issue? Declude 1.81, F-Prot Thanks, Chris Patterson, CCNA Network Engineer --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================