Kaspersky does not catch sobig.f

jhs · 21 Aug 2003, 09:50 PM

I have the last couple of hours been getting a number of email with the sobig.f virus to my FastMail account. The emails has not been dectected by the Kaspersky virus checker. But the strange thing is that if I forward one of these emails as an attachment to myself, the virus checker does catch it, and I get the virus notification email as expected.

Any explanation why it is not caught in the first place, but only when I forward it to myself?

--
Jan

DrStrabismus · 21 Aug 2003, 11:25 PM

was the original received by a pop-link?

jhs · 22 Aug 2003, 12:34 AM

No, there are forwarded from another account. But when I forward the infected emails to that account, FastMail will catch the virus???

--
Jan

DrStrabismus · 22 Aug 2003, 12:42 AM

So it sounds like it gets trapped on outgoing, but not on incoming, mail.

jhs · 22 Aug 2003, 12:54 AM

Quote:

Originally posted by DrStrabismus
So it sounds like it gets trapped on outgoing, but not on incoming, mail.

I just tested that by disabling the forward, and then I have no problem sending to that address.

I also defined a pop-link to download the mails to FastMail with pop. When I did that my forwarded mail was caught by Kaspersky.

Furthermore by coincidense there arrive another infected mail to my other account. This mail was also downloaded with a pop-link to FM and was also correct detected to be a virus.

So it seems actually that the mails only get though Kaspersky if there are sent to FM, but if they are downloaded by a pop-link Kaspersky detects the virus.

--
Jan

21 Aug 2003, 09:50 PM	#1
jhs Essential Contributor Join Date: Jan 2002 Location: Zurich, Switzerland Posts: 350	Kaspersky does not catch sobig.f I have the last couple of hours been getting a number of email with the sobig.f virus to my FastMail account. The emails has not been dectected by the Kaspersky virus checker. But the strange thing is that if I forward one of these emails as an attachment to myself, the virus checker does catch it, and I get the virus notification email as expected. Any explanation why it is not caught in the first place, but only when I forward it to myself? -- Jan

21 Aug 2003, 11:25 PM	#2
DrStrabismus The "e" in e-mail Join Date: May 2002 Posts: 2,804	was the original received by a pop-link?

22 Aug 2003, 12:34 AM	#3
jhs Essential Contributor Join Date: Jan 2002 Location: Zurich, Switzerland Posts: 350	No, there are forwarded from another account. But when I forward the infected emails to that account, FastMail will catch the virus??? -- Jan

22 Aug 2003, 12:42 AM	#4
DrStrabismus The "e" in e-mail Join Date: May 2002 Posts: 2,804	So it sounds like it gets trapped on outgoing, but not on incoming, mail.