Virus not detected

[Ed Bruce]

Martin.Hepworth wrote:
> Ed
>
> 1) Tell clamav about it
>   
Well I didn't because I had found a discussion where someone claimed to
have already done this on the 16th. I will be more proactive in future.

> 2) You allow .exes in 'blind' ...... I leave that on, it's save me a few
> times.
>   
I really don't know what you mean by "allow .exes in 'blind' ". I deny
executables in both the file type and file name checks.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>   
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Ed Bruce
>> Sent: 18 June 2007 20:19
>> To: MailScanner discussion
>> Subject: Re: Virus not detected
>>
>> Ed Bruce wrote:
>>     
>>> Anybody get the "perfroma_invoice.doc" virus? Or is it? We have
>>>       
> received
>   
>>> this email attachment twice. I've run the original email through
>>>       
> both
>   
>>> clamav and bdc by hand and it comes up clean. I've extracted the
>>> attachment and it also comes up clean.
>>>
>>> Yes I'm seeing alot of chatter on the internet claiming it really is
>>>       
> a
>   
>>> virus and one person claims to have sent in the signature to clamav
>>>       
> so
>   
>>> it's in their database. But it scans clean for me????
>>>
>>>       
>> Well to reply to myself. This is a Word document with a macro inside
>>     
> of
>   
>> it that is an executable called Performa_Invoice.exe. If I save this
>>     
> off
>   
>> to my computer, it is scanned by eTrust antivirus and eliminated from
>>     
> my
>   
>> computer. Would be nice if this could be caught some how by clamscan
>>     
> and
>   
>> MS.
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>     
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the 
> addressee only and may be confidential. If they come to you in error 
> you must take no action based on them, nor must you copy or show them 
> to anyone. Please advise the sender by replying to this e-mail 
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of 
> the author and unless specifically stated to the contrary, are not 
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure 
> communications medium and can be subject to data corruption. We advise 
> that you consider this fact when e-mailing us. 
> Viruses : We have taken steps to ensure that this e-mail and any 
> attachments are free from known viruses but in keeping with good 
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales 
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
> United Kingdom
> **********************************************************************
>
>