Old virus not detected W97M/Verlor.gen

Julian Field mailscanner at ecs.soton.ac.uk
Sat Dec 28 17:57:54 GMT 2002


Can you send me a copy of the zipped up virus please. (Preferably
password-protect the zip file so it actually gets to me, and tell me what
the password is).

At 21:42 27/12/2002, you wrote:
>One of my users received a Word document which contained the
>W97M/Verlor.gen virus.
>
>Mailscanner signed the message as if it was clean and let it through.
>
>I use McAfee virusscan for both MailScanner and virus checks on my
>filesystem. If I save the word document McAfee correctly finds and
>identifies the virus.
>
>Could there be a bug in MailScanner that would let .doc files through
>without actually being scanned?
>
>According to the maillog the message was scanned :
>Dec 27 16:39:06 raveon MailScanner[9256]: New Batch: Scanning 1 messages,
>59593
>bytes
>Dec 27 16:39:06 raveon MailScanner[9256]: Virus and Content Scanning:
>Starting
>Dec 27 16:39:06 raveon MailScanner[9256]: Uninfected: Delivered 1 messages
>
>I'm running mailscanner-4.10-1 on a RedHat 8.0 box
>
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list