Missed virus?

[Desai, Jason]

> >>I performed a test myself, which I hoped would imitate the message
> >>which
> >>the original post was about.  I created an email with email.com and
> >>eicar.zip attached, then forwarded the email as an attachment to
> >>myself.  Both Sophos(savi) and Clam picked up both copies of eicar,
> >>whats more MailScanner also blocked the com file.
>              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> surprised me (pleasantly).  I didn't really expect that MailScanner
> would recurse through attached emails (Julians too clever by half!).
> Which begs the question why didn't it recurse through the attached
> message in Gerry's file.

Without seeing the file myself, I would guess that it is inside of an
attached email message (.txt) in some rfc format which Clam does not unpack
to check for viruses.

Jason