virus detection reporting wrong scanner
Jeff Mills
Jeff.Mills at versacold.com.au
Mon Sep 1 23:32:39 IST 2008
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Paul Hutchings
> Sent: Monday, 1 September 2008 11:03 PM
> To: MailScanner discussion
> Subject: RE: virus detection reporting wrong scanner
>
> The lint seems to check out just fine. Maybe my
> understanding is wrong, but I thought that if multiple
> engines caught a virus in a message it listed that multiple
> engines had detected something in the report that's sent to
> postmaster (or wherever) - all I know is I have an entry in
> maillog by vba32 saying it detected a virus, at the same time
> an email was deleted and a report sent to postmaster saying
> it was because clam32 had detected a virus - yet there's no
> report in the postmaster mailbox that mentions vba32.
>
I have a similar issue, but have never bothered with it.
Clamav finds a virus, and MailScanner reports that F-Prot and
Bitdefender find it too.
Sep 2 03:16:53 sam MailScanner[8070]: Clamd::INFECTED::
Email.Spam.Gen3737.Sanesecurity.08072802.StormSpam FOUND ::
./8C34AD3E132.E90B8/
Sep 2 03:16:53 sam MailScanner[8070]: Virus Scanning: Clamd found 1
infections
Sep 2 03:16:53 sam MailScanner[8070]: Virus Scanning: F-Prot found 1
infections
Sep 2 03:16:53 sam MailScanner[8070]: Virus Scanning: Bitdefender found
1 infections
Sep 2 03:16:53 sam MailScanner[8070]: Infected message
8C34AD3E132.E90B8 came from 88.243.8.69
Sep 2 03:16:53 sam MailScanner[8070]: Virus Scanning: Found 1 viruses
Sep 2 03:16:53 sam MailScanner[8070]: Virus Scanning completed at 3371
bytes per second
Sep 2 03:16:53 sam MailScanner[8070]: Viruses marked as silent: Clamd:
message was infected:
More information about the MailScanner
mailing list