OK, so it works on your system and not on mine - what should I do now? NONE of the zip files have ever been rejected despite the indications in the log files that a virus was found. Do I need to start over and just re-install or is there something else that I can do?
Alex Vandenham Avantel Systems ============= On April 28, 2004 09:30 am, S Karthikeyan wrote: > Dear Alex, > > > Here's a more pertinent selection from the mail log files showing that a > > virus was found and yet the conclusion and marking in the e-mail was > > "Uninfected". How can I get that fixed? > > > > Apr 27 17:39:24 kingsmere MailScanner[29517]: Virus and Content Scanning: > > Starting > > Apr 27 17:39:30 kingsmere MailScanner[29517]: > > /usr/share/spool/MailScanner/incoming/29517/./i3RLctN00386/dinner.zip: > > Worm.SomeFool.Gen-2 FOUND > > Apr 27 17:39:30 kingsmere MailScanner[29517]: Virus Scanning: ClamAV > > found 1 infections > > Apr 27 17:39:35 kingsmere MailScanner[29517]: > > /usr/share/spool/MailScanner/incoming/29517/i3RLctN00386/dinner.zip/dinne > >r.scr INFECTED I-Worm.NetSky.c > > Apr 27 17:39:35 kingsmere MailScanner[29517]: Virus Scanning: Kaspersky > > found 1 infections > > Apr 27 17:39:35 kingsmere MailScanner[29517]: Virus Scanning: Found 1 > > viruses Apr 27 17:39:36 kingsmere MailScanner[29517]: Uninfected: > > Delivered 1 messages > > > > The resulting e-mail was marked as: > > The msg.zip file is being detected properly in one of our test machines. > It was detected in both OpenProtect-5.0.1.5 and 5.0.1.6. > > The warning is as below: > > This is a multi-part message in MIME format. > > --13WHI15H11-=-D13RQSW6VO-CUT-HERE-AJO2N1CH53-=-S6CZC1DIWZ > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 7bit > > Warning: This message has had one or more attachments removed > Warning: (details.txt .pif, msg.zip). > Warning: Please read the "examplq-Attachment-Warning.txt" attachment(s) > for more information. > > sample from alex > > --13WHI15H11-=-D13RQSW6VO-CUT-HERE-AJO2N1CH53-=-S6CZC1DIWZ > Content-Type: text/plain; > charset="us-ascii"; > name="examplq-Attachment-Warning.txt" > Content-Disposition: attachment; filename="examplq-Attachment-Warning.txt" > Content-Transfer-Encoding: quoted-printable > > This is a message from the OpenProtect E-Mail Virus Protection Service > ---------------------------------------------------------------------- > The original e-mail attachment "msg.zip" > was believed to be infected by a virus and has been replaced by this > warning message. > > If you wish to receive a copy of the *infected* attachment, please > e-mail helpdesk and include the whole of this message > in your request. Alternatively, you can call them, with > the contents of this message to hand when you call. > > At Wed Apr 28 13:26:06 2004 the virus scanner said: > ClamAV: details.txt .pif contains Worm.SomeFool.P=20 > MailScanner: Shortcuts to MS-Dos programs are very dangerous in > email (d= > etails.txt .pif) > No programs allowed (details.txt .pif) > > Note to Help Desk: Look on OpenProtect at examplq in > /var/spool/MailScanner= /quarantine/20040428 (message 767885). > --=20 > Postmaster > > cheers, > Karthikeyan, S. -- This message has been scanned for viruses and dangerous content, and is believed to be clean.
