Hi Scott, If I understand the IMail directory structure correctly the spool\web directory is only used for mail attachments sent via the webinterface. If that is indeed the case then here a logfile from Sophos to show you why it is important to scan webmail for virusses.
Groetjes, Bonno Bloksma .... Back up my hard drive? How do I put it in reverse? ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 06, 2004 4:20 AM Subject: Sweep VIRUS ALERT from dommie.hengelo.tio.nl > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\Info(1).zip > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INFORM~2.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INFORM~1.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INFORM~3.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INFORM~4.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INE785~1.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INE385~1.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INEB85~1.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\Info.zip > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > Virus: Sophos Anti-Virus report: > Virus: 'W32/Bagle-Zip' detected in C:\IMail\spool\web\INEF75~1.ZIP > User: NT AUTHORITY\SYSTEM > At 04:20 on Tuesday, April 06, 2004 > User: Administrators > Node: MAIL > > > --- > [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] > > --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
