sometimes Re: to Virus Document getting throught

[Martin Hepworth]

<x-flowed>
Daniel

had a look in http://www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog and 
couldn't spot anything in the fixes that mentioned anything like this.

You don't mention what your MTA is, but there are quite a few fixes in 
later versions for postfix...and the mailserver on mail.hnm.de is being 
quiet about what it's running;-)

Might be worthwhile upgrading to 4.34, seeing if the problem still exists.


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Daniel Gercke wrote:
> it is a bounce email, and i´m using an older version of mailscanner 
> (4.28.5).
> 
> all other emails which contains these netsky variant will be catched, 
> only from mailerdaemon at t-online.de will getting throught. If you want, i 
> can send a zip file including a saved copie in mbox format
> 
> Daniel Gercke
> 
> programmierung . system managements
> 
> 
> Martin Hepworth schrieb:
> 
>> Hi
>>
>> Netsky-x has been around since April so the AV should pick it.
>>
>> Is this email a 'bounce' or an original email?
>>
>> Also what version of MailScanner?
>>
>> -- 
>> Martin Hepworth
>> Snr Systems Administrator
>> Solid State Logic
>> Tel: +44 (0)1865 842300
>>
>>
>> Daniel Gercke wrote:
>>
>>> Hi all,
>>>
>>> since 2 days we receive returned mail form t-online.de Mailer-Daemon,
>>> where original Mail was a Virus. Norton Antivirus found Netsky.X but
>>> none of the Virus Scanner in Mailscanner found these Virus.
>>>
>>> Virusscanner running (Norman,f-prot,clamav)
>>>
>>> Any ideas?
>>> -- 
>>>
>>> Daniel Gercke
>>>
>>>
>>> -- 
>>> haus neuer medien GmbH . agentur fuer neuen antrieb
>>> .
>>> Tel 03834 8313 0 . Fax 8313 13 . info at hnm.de . www.hnm.de
>>> Wolgaster Strasse 146  (Ollmannsche Villa) . 17489 Greifswald
>>> AG Stralsund HRB 5089 . Geschaeftsfuehrer RA Daniel Scheibner
>>> .
>>> -- 
>>> [Diese Nachricht gilt als frei von Viren und gefaehrlichen 
>>> Dateianhaengen.
>>> Schutz vor Viren und Spam von haus neuer medien. Bei Fragen oder
>>> Interesse Kontakt ueber mailscanner at hnm.de oder 03834 83130.]
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>
>>
>> **********************************************************************
>>
>> This email and any files transmitted with it are confidential and
>> intended solely for the use of the individual or entity to whom they
>> are addressed. If you have received this email in error please notify
>> the system manager.
>>
>> This footnote confirms that this email message has been swept
>> for the presence of computer viruses and is believed to be clean.
>>
>> **********************************************************************
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
> 
> 
> -- 
> haus neuer medien GmbH . agentur fuer neuen antrieb
> .
> Tel 03834 8313 0 . Fax 8313 13 . info at hnm.de . www.hnm.de
> Wolgaster Strasse 146  (Ollmannsche Villa) . 17489 Greifswald
> AG Stralsund HRB 5089 . Geschaeftsfuehrer RA Daniel Scheibner
> .

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

</x-flowed>