Antivir

[Ugo Bellavance]

> -----Message d'origine-----
> De : Erik Jakobsen [mailto:eja at URBAKKEN.DK]
> Envoyé : Monday, January 12, 2004 2:03 PM
> À : MAILSCANNER at JISCMAIL.AC.UK
> Objet : Re: Antivir
> 
> 
> Hello folks.
> 
> >> What I usually do is send it to myself from my Yahoo! Account.
> >
> >Thanks Ugo. I'll do the same here :-)
> >
> >> Ugo
> 
> I did send one of the Eicar testfiles to myself. It was 
> detected by f-prot
> and clamav, but unfortunately not by antivir :-)
> 
> What the heck is wrong here ?. Any suggestions ?.
> 
> **************************************************************
> ************

Anything weird in your logs?

could you copy/paste the section of MailScanner.conf about virus scanners settings?

> 
> This is a message from the MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail attachment "eicar.com"
> was believed to be infected by a virus and has been replaced 
> by this warning
> message.
> 
> If you wish to receive a copy of the *infected* attachment, please
> e-mail helpdesk and include the whole of this message
> in your request. Alternatively, you can call them, with
> the contents of this message to hand when you call.
> 
> At Mon Jan 12 19:57:43 2004 the virus scanner said:
>    F-Prot: eicar.com  Infection: EICAR_Test_File
>    ClamAV: eicar.com contains Eicar-Test-Signature
>    MailScanner: Executable DOS/Windows programs are dangerous in email
> (eicar.com)
> 
> Note to Help Desk: Look on the MailScanner in
> /var/spool/MailScanner/quarantine/20040112 (message AE0F146F9D).
> -- Postmaster MailScanner thanks transtec Computers for their support
> 
> /Erik.
>