Sobig not detected

MailScanner Mailbox mailscan at PRIS.CA
Wed Aug 20 18:16:37 IST 2003


Yup, looks like something Sophos related, I just installed clamav and am
now detecting Sobig-F.

Anybody else see this with Sophos?


Rick Noble

On Wed, 20 Aug 2003, Paul Hamilton wrote:

> On Wed, 20 Aug 2003, MailScanner Mailbox wrote:
>
> > Hello Group
> >
> > I have looked through the archives and see a lot of talk about Sobig-F,
> > except what seems to be happening to us.
> >
> > We are also getting the "Found to be clean" header along with the change
> > we made "Message infected" (shown below).
> >
> > It appears as though we are also not detecting the Sobig-F virus even
> > though we have the updated ide from Sophos. We are however catching most
> > of the Sobig-F infected emails due to the unsafe file attachments (scr,
> > pif, etc)
> >
> > Is anybody else not detecting Sobig-f ?
> > Currentley we are only running Sophos, and I can see that it is catching
> > other virus's.
> >
> > Thanks
> >
> > Rick Noble
>
> I just scanned my quarantine directory and ClamAV and F-Prot are both
> finding the Sobig.F virus.  Trend wasn't until I updated its virus files
> that were released yesterday.  Now it is finding Sobig.F too.
>
> I don't use Sophos.
>
> Gerry
>
> "The lyfe so short, the craft so long to learne"  Chaucer
>
> >We run 3 scanners, Sophos, Fprot and Kaspersky.
> >We concur that Sophos is not catching Sobig F 100% of the time
> >but fortunately if missed by Sophos it is always caught by both
> >Fprot and Kaspersky.
>
> Paul H
>



More information about the MailScanner mailing list