Silent virus and filename check

[Antony Stone]

On Tuesday 26 August 2003 7:50 am, Peter Peters wrote:

> Hi,
>
> I just received a warning about a alledged Sobig infection on my system
> from somebody using MailScanner. Their MS triggered on the virusscanner
> seeing Sobig and MS itself detected the .pif extension.
>
> I wondered what happens when this occurs and Sobig is listed as silent
> virus. Does that prevail over tellling the sender his .pif did not get
> through or do filename checks allways produce a warning to the sender?

If Sobig had been listed as a silent virus then their machine would not have
sent the "bounce" to you (because you didn't send them the virus in the first
place).   The filename check is subordinate to the virus check.

If you know who the mail administrator for that site is, or if the mail
you've received contains any contact details regading the message from
MailScanner, you might want to ask them to add "Sobig" to the "Silent Virus"
list, and that will cut down a lot of useless traffic leaving their site (and
probably queueing up in their outbound queue because of delivery problems as
well).

Antony,

--

The difference between theory and practice is that
in theory there is no difference, whereas in practice there is.