Also make sure your F-prot is current and your command line switches have been updated to work with the more current version. About 2 or so months ago a command line switch was changed regarding scanning zip files.
you could add a BANNAME RAPIDSYS.COM.ZIP line in the virus.cfg. Odds are you won't get a valid zip file named that way. ----- Original Message ----- From: "Chris Patterson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 21, 2004 12:01 PM Subject: RE: [Declude.Virus] MyDoom.o's slipping through. Log Files: 10/19/2004 12:58:45 Q47c21ade0114a44b MIME file: [EMAIL PROTECTED] [base64; Length=29144 Checksum=3153474] 10/19/2004 12:58:46 Q47c21ade0114a44b Scanned: Virus Free [MIME: 2 31672] Thanks, Chris Patterson, CCNA Network Engineer -----Original Message----- From: Matt [mailto:[EMAIL PROTECTED] Sent: Thursday, October 21, 2004 12:51 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] MyDoom.o's slipping through. Chris, It's always helpful to share the actual lines of your log when asking a question such as this. That will clear up any possible misperceptions and allow one to focus on what happened. Matt Chris Patterson wrote: >I have had two reports in the last 2 days about a virus coming through. > >The customer forwarded these to me on an Exchange mailbox using Mcaffee >which identified them as MyDoom.o. Tracing the Logs, they were scanned >and Deemed Virus Free using Prescan. > >Anyone have this issue? > >Declude 1.81, F-Prot > >Thanks, > >Chris Patterson, CCNA >Network Engineer > > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. > > > > -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
