<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2>-----BEGIN PGP SIGNED MESSAGE-----<BR>Hash:
SHA1</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I'm running MS 4.28.6-1 on RH8 with ClamAV .70 and
F-Prot (4.41<BR>program / 3.14.11 engine / 3 May 2004 Defs) in front of
my<BR>Exchange 5.5 server running Symantec AV. MS and AV scanners<BR>have
been catching all my viruses for 6 months or more on my MS<BR>server, never
letting any through to my Symantec AV on Exchange.<BR> Recently, I have
been receiving virus warnings that Symantec<BR>has caught <A
href="mailto:Netsky.Q@mm.enc">Netsky.Q@mm.enc</A> on my Exchange server.
While I'm<BR>glad Symantec caught it...I'm troubled as to why it's
getting<BR>past MS and AV scanners on my RH8 box.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Running MailWatch reveals that F-Prot is
catching<BR><A href="mailto:W32/Netsky.Q@mm">W32/Netsky.Q@mm</A>, however I
don't always trust that AV vendors<BR>name the variants consistently amongst
themselves.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Any suggestions on how I should proceed in
troubleshooting this<BR>issue? Is anyone experiencing the
same?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Thanks in advance,</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Christian</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Christian Campbell <BR>Systems Engineer, Sair LCP,
A+, N+, i-Net+ <BR>Bruegger's Enterprises <BR>Desk: 802-652-9270 <BR>Cell:
802-734-5023 <BR>Fax: 802-660-4034 <BR>Email: ccampbell at brueggers dot com
</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>PGP Public Key available via PGP keyservers <BR>or
<A
href="http://www2.brueggers.com/pgp/ccampbell.html">http://www2.brueggers.com/pgp/ccampbell.html</A>
</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>"We all know Linux is great... <BR>It does infinite
loops in 5 seconds." <BR>
-Linus Torvalds </FONT></DIV>
<DIV> </DIV><FONT face=Arial size=2>
<DIV><BR>-----BEGIN PGP SIGNATURE-----<BR>Version: GnuPG v1.2.3-nr1 (Windows XP)
- GPGshell v3.10</DIV>
<DIV> </DIV>
<DIV>iD8DBQFAl/UpbedHH5VEUwcRAo4SAKDb1jZ71qNsJkr06E7i2vFvHFGQMgCg1HQ8<BR>QJadMy0Rwb6L/YcMzxYv8Hk=<BR>=ktt4<BR>-----END
PGP SIGNATURE-----<BR></FONT></DIV></BODY></HTML>
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail@jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html