Re: Viruses not being picked up

Clive McDowell wrote:

>I have an example message that is rejected
>by the hubs running the older software but the updated hub passes it
>through. 
>
Are you sure about this? (e.g the fact that older versions correctly 
identifies the SAME
message that newer version misses? Or is it just the same virus name?)

>The strange thing is that viruses are being detected in some cases but not
>others. 
>
I think I post something similar a few days ago.

>Is it possible that exiscan isn't demiming some messages correctly?
>  
>
Short answer : yes.
Usually it produces corrupted zips, which sometimes can be decompressed 
anyway
(sophie should be able to detect virus in this case), but sometimes the zip
can't be extracted at all.

>Any other theories gratefully received.
>
>  
>
Just curious, is sophie capable of scanning raw email files? ClamAV does.
If that is the case, sophie should be able to detect mail from the raw 
message.
If you only rely on extracted attachments, chances are you're going to miss
some (or perhaps lots) of viruses.