Problems with Bitdefender

[Denis Beauchemin]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Denis Beauchemin wrote:

> Hello,
>
> I run Bitdefender and McAfee on my MS servers (4.35.5 and 4.34.4).  
> This morning I noticed my quarantine dir getting bigger.
>
> Since I don't quarantine virus infected messages, it had to be 
> something else.  Turns out it was an undetected virus by McAfee 
> (another one).  Bitdefender was catching it (last updated this morning 
> at 10:41 and file was quarantined at 11:02) but MS still quarantined it.
>
> Is there something wrong with MS' virus detection with Bitdefender?
>
> Denis
>
Some log information:
May 31 11:28:36 smtpe2 sendmail[12101]: j4VFSYb7012101: 
from=<questions at cheapnfltickets.com>, size=25281, class=0, nrcpts=1, 
msgid=<pawpouljezuwqpmljyc at usherbrooke.ca>, proto=SMTP, daemon=MTA, 
relay=host18-9.pool80207.interbusiness.it [80.207.9.18]
May 31 11:28:36 smtpe2 sendmail[12101]: j4VFSYb7012101: to=<...>, 
delay=00:00:01, mailer=relay, pri=55281, stat=queued
May 31 11:28:40 smtpe2 MailScanner[8358]: 
/var/spool/MailScanner/incoming/8358/./j4VFSYb7012101/20_04_2005.exe  
infected: Win32.Bagle.BO at mm
May 31 11:28:40 smtpe2 MailScanner[8358]: 
/var/spool/MailScanner/incoming/8358/./j4VFSYb7012101/5.zip=>20_04_2005.exe   
infected: Win32.Bagle.BO at mm
May 31 11:28:40 smtpe2 MailScanner[8358]: Infected message 
j4VFSYb7012101 came from 80.207.9.18
May 31 11:28:40 smtpe2 MailScanner[8358]: Filename Checks: Fichiers EXE 
dangereux (j4VFSYb7012101 20_04_2005.exe)
May 31 11:28:40 smtpe2 MailScanner[8358]: Saved entire message to 
/quarantaine/usherbrooke/20050531/j4VFSYb7012101
May 31 11:28:40 smtpe2 MailScanner[8358]: Saved infected 
"20_04_2005.exe" to /quarantaine/usherbrooke/20050531/j4VFSYb7012101
May 31 11:28:40 smtpe2 MailScanner[8358]: Saved infected "5.zip" to 
/quarantaine/usherbrooke/20050531/j4VFSYb7012101
May 31 11:28:41 smtpe2 sendmail[12174]: j4VFSYb7012101: to=<...>, 
delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=145281, 
relay=courriel.usherbrooke.ca. [132.210.244.161], dsn=2.0.0, stat=Sent 
(j4VFSf105362 Message accepted for delivery)

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045



------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, "S/MIME Cryptographic Signature"  ]
    [ Application/X-PKCS7-SIGNATURE  4.4KB. ]
    [ Unable to print this part. ]