Infected message delivered

[Pavel Zichovsky]

Hi there,

No, I do not use symbolic link in whole Mailscanner tree (incoming work
directory, quarantine etc.)
Since upgrade nothing has changed, upgrade was yesterday. Just before
upgrade of MailScanner I did upgrade of AVG Antivirus (from version 7.0.8 to
7.0.10) but I tested it and did not notice any change in output (of course
except version).

Is there any way to get exact commandline (all parameters etc) which is used
by wrapper script?
It could be the way testing this exact command manualy.

With Regards
Pavel Zichovsky (zichovsky at trul.cz)

> -----Pùvodní zpráva-----
> 
> Pavel,
> 
> Are you using symbolic links anywhere?  I know McAfee will 
> detect but not remove viruses if you have a symbolic link and 
> not the real path of your Incoming Work Dir.  Has anything 
> else changed since your upgrade?
> 
> Jase
> 
> Pavel Zichovsky wrote:
> > Hi there,
> >
> > I am using MailScanner (currently 4.32.5-1) with AVG Antivirus (and 
> > Bitdefender as second antivirus). All was good, but now, 
> when only AVG 
> > indetifies virus (Bitdefender not), Mailscanner will pass 
> message as 
> > uninfected to recipient.
> >
> > Fragment of maillog:
> > -------------------
> > Aug 11 14:10:28 server MailScanner[3547]: New Batch: Scanning 1 
> > messages, 1479 bytes Aug 11 14:10:28 server MailScanner[3547]: Spam 
> > Checks: Starting Aug 11 14:10:30 server MailScanner[3547]: 
> Virus and 
> > Content Scanning:
> > Starting
> > Aug 11 14:10:31 server MailScanner[3547]:
> > ^M^M^M^M^M^M^M./i7BCALN04049/msg-3547-3.bin  Virus identified 
> > EICAR_Test (+6) Aug 11 14:10:31 server MailScanner[3547]: Virus 
> > Scanning: Avg found 1 infections Aug 11 14:10:32 server 
> > MailScanner[3547]: Uninfected: Delivered 1 messages 
> > --------------------
> >
> > I suppose, that it is connected with "^M" problem in path 
> (as written 
> > in another message). But virus passing through MailScanner is 
> > alarming.
> >
> > What to do with this?
> >
> > With Regards
> > Pavel Zichovsky (zichovsky at trul.cz)
> >
> > -------------------------- MailScanner list ----------------------
> > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > Before posting, please see the Most Asked Questions at
> > http://www.mailscanner.biz/maq/     and the archives at
> > http://www.jiscmail.ac.uk/lists/mailscanner.html
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
> 

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html