Susan, You could try having Norton exclude your Imail dir. This has worked for some customers and not for others. If you exclude the Directory and and you still get the error message in the logs try rebooting your server to remove Nortons scanner from memory. If this still does not work best to talk to symantec or disable it all together.
David B www.declude.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Duncan Sent: Monday, May 09, 2005 9:51 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] not catching [EMAIL PROTECTED] I went through the logs, and yes I was running another on access scanner. I had disabled f-prot's on access scanner but forgot that I was also running Norton on that machine. I've disabled Norton but I was wondering if I could re-enable Norton but just not have it scan the imail directory? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: May 9, 2005 9:30 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] not catching [EMAIL PROTECTED] On 9 May 2005 at 9:27, Susan Duncan wrote: Hi Susan - 2 things - What do your logs show - eg Is Declude scanning the suspect email? 2- If it is I bet Symantec is giving a false positive - non virulent positive. -Nick > Not sure if I should be posting this here or sending something to > f-prot. We're running Declude Virus with F-Prot and some of the email > messages getting through to the client are coming up with > [EMAIL PROTECTED] getting caught by Symantec. > > I've been getting these since late last week and I've updated f-prot. > Am I just not configured properly or is f-prot just that far behind in > updates? > > > Susan Duncan > Web/Communications Officer / Agent des Communications/web Union of > Taxation Employees / Syndicat des employées de l'Impôt > Tel: 613-235-6704 ext 240 > Fax: 613-234-7290 > e-mail: [EMAIL PROTECTED] > http://www.ute-sei.org/ > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. __________ NOD32 1.1090 (20050508) Information __________ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.