During the development of my log analyzer, I noticed the following with declude.... For the same type of vulnerability, sometimes it reports INFECTED sometimes it doesn't: Why is that?
01/23/2003 04:41:31 Qc6d60322006e9eb4 Outlook 'CR' vulnerability [Received: ] in line 3 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting file with virus 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting E-mail with virus! 01/23/2003 04:41:31 Qc6d60322006e9eb4 Scanned: CONTAINS A VIRUS [MIME: 0 0] 01/23/2003 04:41:31 Qc6d60322006e9eb4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 04:41:31 Qc6d60322006e9eb4 Subject: I took some pictures... ohljkdqqCloolfrp1qhw 01/23/2003 05:19:44 Qcfc70372007a8cb8 Outlook 'CR' vulnerability [Return-Pat] in line 53 01/23/2003 05:19:44 Qcfc70372007a8cb8 File(s) are INFECTED [0] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting file with virus 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting E-mail with virus! 01/23/2003 05:19:44 Qcfc70372007a8cb8 Scanned: CONTAINS A VIRUS [MIME: 2 778] 01/23/2003 05:19:44 Qcfc70372007a8cb8 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Subject: FW: Smile --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
