Reporting quirqs

Julian Field mailscanner at ecs.soton.ac.uk
Tue Apr 29 16:55:15 IST 2003


At 07:14 29/04/2003, you wrote:
>Hi!
>
>I got a virus mailed myself, and noticed this:
>
>Warning: This message has had one or more attachments removed
>Warning: (LGKJPCLG.EXE, ClamAV: LGKJPCLG.EXE).
>Warning: Please read the "VirusWarning.txt" attachment(s) for more
>information.
>
>
>This is a message from the MailScanner E-Mail Virus Protection Service
>----------------------------------------------------------------------
>The original e-mail attachment "LGKJPCLG.EXE"
>was believed to be infected by a virus and has been replaced by this
>warning
>message.
>
>If you wish to receive a copy of the *infected* attachment, please
>e-mail helpdesk and include the whole of this message
>in your request. Alternatively, you can call them, with
>the contents of this message to hand when you call.
>
>At Time::tm=ARRAY(0x90952b4) the virus scanner said:
>    F-Prot: LGKJPCLG.EXE  Infection: W32/Hybris.worm.B
>    Executable DOS/Windows programs are dangerous in email (LGKJPCLG.EXE)
>
>The 'At Time::' isnt right it seems :)
>Its with MailScanner-4.15-9, f-prot and clamav.

I've already fixed that.

>It also looks strange that the inline warning tells ClamAV: and the
>attachment only tells about f-prot ...

Now that is curious. Anyone else seen it?
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list