AV / MailScanner missing message.zip

[Julian Field]

<x-flowed>
What version of MailScanner are you running? I strongly suspect you need to
upgrade. Check the ChangeLog at
www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog and you will find a mention
of MyDoom-O.

At 09:45 18/10/2004, you wrote:
>I've recently been receiving some MyDoom.O messages ( as i'm sure the rest
>of the world has too )
>
>
>My AV software  (CAI etrust ) will detect the virus in the attached zip file
>
>charon:~ # inocmd32 message.zip
>File /root/message.zip is infected by virus: Win32/MyDoom.O.ZIP.Worm
>
>But when its sent as an email attachement it doesn't detect it !
>
>Oddly though if I rename message.zip to message.scr the AV software does
>detect it in an email attachment
>
>I added message.zip into the filename.rules.conf to catch it.  What have i
>missed here ?

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>