Sobig not detected

[Paul Hamilton]

On Wed, 20 Aug 2003, MailScanner Mailbox wrote:

> Hello Group
>
> I have looked through the archives and see a lot of talk about Sobig-F,
> except what seems to be happening to us.
>
> We are also getting the "Found to be clean" header along with the change
> we made "Message infected" (shown below).
>
> It appears as though we are also not detecting the Sobig-F virus even
> though we have the updated ide from Sophos. We are however catching most
> of the Sobig-F infected emails due to the unsafe file attachments (scr,
> pif, etc)
>
> Is anybody else not detecting Sobig-f ?
> Currentley we are only running Sophos, and I can see that it is catching
> other virus's.
>
> Thanks
>
> Rick Noble

I just scanned my quarantine directory and ClamAV and F-Prot are both
finding the Sobig.F virus.  Trend wasn't until I updated its virus files
that were released yesterday.  Now it is finding Sobig.F too.

I don't use Sophos.

Gerry

"The lyfe so short, the craft so long to learne"  Chaucer

>We run 3 scanners, Sophos, Fprot and Kaspersky.
>We concur that Sophos is not catching Sobig F 100% of the time
>but fortunately if missed by Sophos it is always caught by both
>Fprot and Kaspersky.

Paul H