----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 07, 2003 12:25 PM Subject: Re: [Declude.JunkMail] declude jm not sometimes not logging "INFECTED"
> > >But in neither of those instances did it detect a "virus".... only a > >vulnerability... > > When a vulnerability is detected, it is treated the same as if a virus were > detected, so references in the logs to "virus" can mean an E-mail that > either has a virus or a vulnerability. > -Scott Right, I see that, but I still don't see why declude did not report "INFECTED" My full log for this specific spoolid is below... The same vulnerability, is detected as "CONTAINS A VIRUS" but only one contains INFECTED... 01/23/2003 04:41:31 Qc6d60322006e9eb4 Outlook 'CR' vulnerability [Received: ] in line 3 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting file with virus 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting E-mail with virus! 01/23/2003 04:41:31 Qc6d60322006e9eb4 Scanned: CONTAINS A VIRUS [MIME: 0 0] 01/23/2003 04:41:31 Qc6d60322006e9eb4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 04:41:31 Qc6d60322006e9eb4 Subject: I took some pictures...ohljkdqqCloolfrp1qhw 01/23/2003 05:19:44 Qcfc70372007a8cb8 Outlook 'CR' vulnerability [Return-Pat] in line 53 01/23/2003 05:19:44 Qcfc70372007a8cb8 File(s) are INFECTED [0] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting file with virus 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting E-mail with virus! 01/23/2003 05:19:44 Qcfc70372007a8cb8 Scanned: CONTAINS A VIRUS [MIME: 2778] 01/23/2003 05:19:44 Qcfc70372007a8cb8 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Subject: FW: Smile > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
