Infected message delivered

[Desai, Jason]

Pavel,

Are you using symbolic links anywhere?  I know McAfee will detect but not
remove viruses if you have a symbolic link and not the real path of your
Incoming Work Dir.  Has anything else changed since your upgrade?

Jase

Pavel Zichovsky wrote:
> Hi there,
>
> I am using MailScanner (currently 4.32.5-1) with AVG Antivirus (and
> Bitdefender as second antivirus). All was good, but now, when only AVG
> indetifies virus (Bitdefender not), Mailscanner will pass message as
> uninfected to recipient.
>
> Fragment of maillog:
> -------------------
> Aug 11 14:10:28 server MailScanner[3547]: New Batch: Scanning 1
> messages, 1479 bytes
> Aug 11 14:10:28 server MailScanner[3547]: Spam Checks: Starting
> Aug 11 14:10:30 server MailScanner[3547]: Virus and Content Scanning:
> Starting
> Aug 11 14:10:31 server MailScanner[3547]:
> ^M^M^M^M^M^M^M./i7BCALN04049/msg-3547-3.bin  Virus identified
> EICAR_Test (+6)
> Aug 11 14:10:31 server MailScanner[3547]: Virus Scanning: Avg found 1
> infections
> Aug 11 14:10:32 server MailScanner[3547]: Uninfected: Delivered 1
> messages --------------------
>
> I suppose, that it is connected with "^M" problem in path (as written
> in another message). But virus passing through MailScanner is
> alarming.
>
> What to do with this?
>
> With Regards
> Pavel Zichovsky (zichovsky at trul.cz)
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html