[linux] Bitdefender: False positive found in plain text-eMail?

  • Thread starter Thread starter Urs Martini
  • Start date Start date
U

Urs Martini

Hi!

I have the av-software bitdefender scanning my in- and outbound
email-traffic on my linux box.

Bitfender works together with amavisd-new and postfix and reliably
cleans each and every virus sent to me.

Two days ago I watched something very strange happen: the virus-scanner
seemed to identify a virus called VBS.Anjulie.A@mm in a pure plain-text-
eMail!

How can this happen??

There is no attachment, no HTML-stuff, no binary code, nothing that
could make bitdefender think that there could be a infected file!

I can't explain this to myself but perhaps there's someone out there
who experienced sth. like that too?

Can it be that the scanner somehow detects the virus-signature in that
plaintext mail? How would this be possible?

Is the bitdefender-av-software buggy?

Bye...
Urs
 
Urs said:
Hi!

I have the av-software bitdefender scanning my in- and outbound
email-traffic on my linux box.

Bitfender works together with amavisd-new and postfix and reliably
cleans each and every virus sent to me.

Two days ago I watched something very strange happen: the virus-scanner
seemed to identify a virus called VBS.Anjulie.A@mm in a pure plain-text-
eMail!

How can this happen??

There is no attachment, no HTML-stuff, no binary code, nothing that
could make bitdefender think that there could be a infected file!

I can't explain this to myself but perhaps there's someone out there
who experienced sth. like that too?

Can it be that the scanner somehow detects the virus-signature in that
plaintext mail? How would this be possible?
Click to expand...

vbs based malware are plain-text scripts... perhaps something in the
message header set the av off or perhaps someone cut-n-paste the virus
source into the message body itself...
Is the bitdefender-av-software buggy?
Click to expand...

all software has bugs...
 
Back
Top