AV / MailScanner missing message.zip

[Dawson, Alan]

I've recently been receiving some MyDoom.O messages ( as i'm sure the rest
of the world has too )


My AV software  (CAI etrust ) will detect the virus in the attached zip file

charon:~ # inocmd32 message.zip
File /root/message.zip is infected by virus: Win32/MyDoom.O.ZIP.Worm

But when its sent as an email attachement it doesn't detect it !

Oddly though if I rename message.zip to message.scr the AV software does
detect it in an email attachment

I added message.zip into the filename.rules.conf to catch it.  What have i
missed here ?


Alan Dawson
--
ICT Services

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).