Why mailscanner fails recognizing a forwarded infected.

[Mirko Bovati]

On Friday 03 September 2004 16:28, you wrote:
> Mirko
>
> do these scanners recognise the virus is called from the command line on
> the MS computer??
hi Martin,

The local antivirus who finds the virus is VisusScan 7.0 on a MS computer.
VirusScan doesn't clean the email. I forward the infected email (and
MailScanner say it is clean) and the recipient again find it is infected.

But, on another way, if I after receiving the infected email, I save the
attach (i.e. the virus) and I send a new email with the saved attach
attached, the MailScanner find the virus.

I don't know if I answered your question.

mirko
>
>
> --
> Martin Hepworth
> Senior Systems Administrator
> Solid State Logic Ltd
> tel: +44 (0)1865 842300
>
> Mirko Bovati wrote:
> > hi all,
> >
> > sorry for reposting the same question, it seems that nobody ever had
> > this problem.
> >
> > I received an infected email by W32/Mabutu.a at MM!zip (the local antivirus
> > found it).
> > If I forward this email, MailScanner say it is clean.
> > Is it the normal behavior of a forwarded infected email? I think no but I
> > can't see where is the problem.
> >
> > I have the pair of df and qf sendmail's that I could send to who is
> > interested to the question.
> >
> > thanks,
> > Mirko

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).