I thought that this got fixed many versions ago, but it appears to be back again (Declude 1.81), where the virus name is taken from "Scanner 1", but the file name is taken from the last scanner listed in the virus.cfg. Snippet from the postmaster e-mail: ===== Declude Antivirus v1.81 caught the W32/[EMAIL PROTECTED] virus in [HTML segment] from [Forged] to: [EMAIL PROTECTED]
Date: 29 Nov 2004 12:01:27 Subject: Re: Hi Spool File: D80156bde012ce82c.SMD Remote IP: 67.114.195.162 ===== Snippet from virus log for this message: ===== 11/29/2004 12:01:27 Q80156bde012ce82c Scanner 1: Virus= W32/[EMAIL PROTECTED] Attachment=Joke.cpl [16] I 11/29/2004 12:01:27 Q80156bde012ce82c Scanner 2: Virus= [ WORM_BAGLE.AT]( 1) in M:\IMail\spool\D80156~1.VIR\1.cpl Attachment=[HTML segment] [16] I 11/29/2004 12:01:27 Q80156bde012ce82c File(s) are INFECTED [ W32/[EMAIL PROTECTED]: 1] ===== Shouldn't this notification read: Declude Antivirus v1.81 caught the W32/[EMAIL PROTECTED] virus in Joke.cpl rather than what is shown above in the postmaster e-mail? Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
