Outdated sophos destroys plain text

[hermit921]

I found an odd problem this morning with one MailScanner system that had 
failed to update Sophos - it has MailScanner 4.46, Sophos 3.96.  Apparently 
about 10% of messages (plain text or html) were marked as a virus by Sophos 
and the body destroyed.  I haven't found a case where there was an 
attachment, but I haven't looked very hard.  When we had a similar problem 
a year or two ago, MailScanner did not delete the message body.  Example 
below.  Any ideas about why this happens?



New message:

>= = = = = = = = = = = = = = = = = = = =
>Warning: VIRUS SCANNER ALERT:
>This message had the following potentially dangerous attachment(s) (the 
>entire message) removed due to virus detection.  Contact your helpdesk for 
>more information.
>= = = = = = = = = = = = = = = = = = = =
>
>
>= = = = = = = = = = = = = = = = = = = = = = = = =
>At Fri Dec  2 08:00:02 2005 the scanner said:
>    SophosSAVI: msg-19508-137.txt caused an error: The main body of virus 
> data is out of date (542)
>
>= = = = = = = = = = = = = = = = = = = = = = = = =


Original message:

The server backup completed successfully at 3:06 am

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!