Because the "INFECTED" line indicates that the virus scanner detected a virus. In the first case, it did not detect a virus. In the second case it did.Right, I see that, but I still don't see why declude did not report "INFECTED" My full log for this specific spoolid is below... The same vulnerability, is detected as "CONTAINS A VIRUS" but only one contains INFECTED...
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
