do sometime mailscanner fails recognizing Mabutu?

[Mirko Bovati]

hi all,

sometime we receive emails with an attach (document.zip) that mailscanner
"Found to be clean" while the local antivirus finds a W32/Mabutu.a at MM!zip.

Strange behavior:
1) We forward the vired email and mailscanner still  "Found to be clean".
2) We save the attached file,  we send a new email and attach the previous
saved file (document.zip) then Mailscanner finds a W32/Mabutu.a at MM!zip


Any clue?
Thanks.
Mirko Bovati


on one installation:
mailscanner-4.12-2
AS2.1
sendmail-8.11.6-28.72
uvscan v4.3.20

on another installation:
mailscanner-4.32.5-1
AS2.1
sendmail-8.11.6-28.72
uvscan v4.3.20

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).