Virus not caught

Christian Campbell ccampbell at BRUEGGERS.COM
Tue May 4 20:52:43 IST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm running MS 4.28.6-1 on RH8 with ClamAV .70 and F-Prot (4.41
program / 3.14.11 engine / 3 May 2004 Defs) in front of my
Exchange 5.5 server running Symantec AV.  MS and AV scanners
have been catching all my viruses for 6 months or more on my MS
server, never letting any through to my Symantec AV on Exchange.
 Recently, I have been receiving virus warnings that Symantec
has caught Netsky.Q at mm.enc <mailto:Netsky.Q at mm.enc>  on my Exchange server.
While I'm
glad Symantec caught it...I'm troubled as to why it's getting
past MS and AV scanners on my RH8 box.

Running MailWatch reveals that F-Prot is catching
W32/Netsky.Q at mm <mailto:W32/Netsky.Q at mm> , however I don't always trust that
AV vendors
name the variants consistently amongst themselves.

Any suggestions on how I should proceed in troubleshooting this
issue?  Is anyone experiencing the same?

Thanks in advance,

Christian

Christian Campbell
Systems Engineer, Sair LCP, A+, N+, i-Net+
Bruegger's Enterprises
Desk: 802-652-9270
Cell: 802-734-5023
Fax: 802-660-4034
Email: ccampbell at brueggers dot com

PGP Public Key available via PGP keyservers
or http://www2.brueggers.com/pgp/ccampbell.html
<http://www2.brueggers.com/pgp/ccampbell.html>

"We all know Linux is great...
It does infinite loops in 5 seconds."
          -Linus Torvalds


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP) - GPGshell v3.10

iD8DBQFAl/UpbedHH5VEUwcRAo4SAKDb1jZ71qNsJkr06E7i2vFvHFGQMgCg1HQ8
QJadMy0Rwb6L/YcMzxYv8Hk=
=ktt4
-----END PGP SIGNATURE-----


-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040504/74b51b0f/attachment.html


More information about the MailScanner mailing list