That means you are not blocking banned extensions within zip files? John T eServices For You
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of JT > Sent: Thursday, January 05, 2006 8:45 AM > To: [email protected] > Subject: RE: [Declude.Virus] Sober.X Variant > > What I am experiencing is that the server lets the virus go through the > system. It scans and result is clean, the end user gets the email and > their Symantec Enterprise snags it and tags it as [EMAIL PROTECTED] > > On Thu, 2006-01-05 at 08:25 -0800, John T (Lists) wrote: > > Is this what you are seeing? > > > > http://www.sophos.com/virusinfo/analyses/w32feebsa.html > > > > John T > > eServices For You > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] > > > On Behalf Of JT > > > Sent: Thursday, January 05, 2006 6:44 AM > > > To: [email protected] > > > Subject: [Declude.Virus] Sober.X Variant > > > > > > Has anyone seen an influx of this virus come through? I've upgraded to > > > the latest F-Prot and it seems like it still sneaking through. Although > > > the Z variant is being stopped by F-prot. Any light that could be shed > > > on this would be greatly appreciated. > > > > > > Also I've tried setting up ClamAV for Windows on our imail server as a > > > scanner. I've got it to scan but it randomly generated an exit code of > > > 50. Does anyone know what exit code 50 from ClamAV means? > > > > > > Thanks, > > > JT > > > > > > --- > > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
