RES: Wrong options for McAfee uvscan?

[Rodrigo Scarano]

Jason, I thinking to put this line on my filename.rules.conf to. Do you have
to restart MailScanner after this change ???
Regards,


Rodrigo Scarano
Target Sistemas
http://www.targetsis.com.br/
rscarano at targetsis.com.br


-----Mensagem original-----
De:     MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] Em nome de
Desai, Jason
Enviada em:     Sexta-feira, 1 de Agosto de 2003 18:15
Para:   MAILSCANNER at JISCMAIL.AC.UK
Assunto:        Re: Wrong options for McAfee uvscan?

For now, I have put the following in my filename.rules.conf.  (One line
separated with tabs)

deny    message.zip             Possible Mimail worm
Possible Mimail worm

Is the filename match case insensitive?

Jason

>
> Looks like McAfee has provided an "extra.dat" file which
> allows the virus to be detected as
> W32/Mimail at MM (ED).
>
> Options presented to uvscan don't seem to affect it one way
> or the other.
>
> I still wonder if we need that --mime option.  Does anyone
> have a case where a virus isn't detected
> by MS without it?
>
> Thanks, Rich B
>