New virus outbreak

[Mike Kercher]

Correct...each engine that detects the virus logs it.  I run Sophos and
ClamAV

Jan 27 08:53:05 rh MailScanner[4893]: Virus and Content Scanning: Starting
Jan 27 08:53:05 rh MailScanner[4893]: INFECTED:: W32/MyDoom-A W32/MyDoom-A::
./i0REqhlr009103/text.zip
Jan 27 08:53:06 rh MailScanner[4893]: Virus Scanning: SophosSAVI found 1
infections
Jan 27 08:53:06 rh MailScanner[4893]: INFECTED:: Worm.SCO.A::
./i0REqhlr009103/text.zip
Jan 27 08:53:07 rh MailScanner[4893]: Virus Scanning: ClamAV Module found 1
infections
Jan 27 08:53:07 rh MailScanner[4893]: Infected message i0REqhlr009103 came
from 208.188.72.25
Jan 27 08:53:07 rh MailScanner[4893]: Virus Scanning: Found 1 viruses
Jan 27 08:53:07 rh MailScanner[4893]: Cleaned: Delivered 1 cleaned messages

Mike


> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Raymond Dijkxhoorn
> Sent: Tuesday, January 27, 2004 7:43 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: New virus outbreak
>
> Hi!
>
> > I was just wondering, can you run two virus scanners @ once? For
> > instance f-prot and clamv?
>
> Sure.
>
> > Will the logs reflect witch virus scanner caught it?
> > I would love to get stats on that ;-)
>
> It will most likely be counted twice, since they both will
> detect this one.
>
> Bye,
> Raymond.
>