-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 'Lo Peter,
On Sun, 27 Oct 2002 16:00:20 +0100 your time, you authored this: PP> Neverthless: I do in fact wonder how Simon managed it, because I see PP> technical problems with re-assembling and virus scanning. I didn't manage it! :-/ S> I was testing the AVG plugin with TB! yesterday with eircar.com available S> from here http://www.eicar.org/anti_virus_test_file.htm The eircar.com got caught but using that test. Running the test at http://www.gfi.com/emailsecuritytest/ gave different results so my reply was perhaps premature and misleading. The 5 fragged messages from gfi.com were visible in the mail server list, Mailwasher, and Mail Dispatcher and did get reassembled in the Inbox. I have run the test posted at gfi.com 6 times now and each time the fragmented message gets through, as you describe, whether sent direct to my mail server or retrieved via ISP POP accounts, and each time the message end's up in my mailbox, reassembled, with eircar.com attached and undetected. Worse still is that after running these test over and over I have found that AVG doesn't consistently detect the incoming infected emails. When I ran all tests available at http://www.gfi.com/emailsecuritytest/ the second time round AVG quarantined 5 of the incoming messages (not the fragmented ones) and the others ended up in the outbox with the reassembled eircar.com test message for Outlook Express users. On the third run AVG didn't quarantine any of them! And the forth run 5 were quarantined again, and each time after that they were quarantined also. I'm going to test it some more because that is strange behavior. Anyhow, I shall go back to manually checking mail in the inbox after this episode. Not tried the Kapersky plugin yet though. - -- Sl�n, Simon @ theycallmesimon.co.uk _______________________________________ Faffing about with TB! v1.61 on W2K SP3 PGP Key: http://pgp.netbanger.com/ -----BEGIN PGP SIGNATURE----- Comment: Privacy is freedom. Protect your privacy with PGP! Comment: KeyID: 0x5C7E8966 Comment: Fingerprint: 851C F927 0296 FF1C 70A2 474F CB6E 6FFE 5C7E 8966 iQA/AwUBPbwiB8tub/5cfolmEQKCpgCfRuluJUEWOrYX9ey/boMHWt7hP/8An0NI kyCpsBvGWxwhYrPZFxpFhHbc =pat3 -----END PGP SIGNATURE----- ________________________________________________ Current version is 1.61 | "Using TBUDL" information: http://www.silverstones.com/thebat/TBUDLInfo.html
