XG 18.0.4 MR4 - MTA SAV misses virus: Mal/Generic-S, CXmail/MalPE-BV

Hello Fred,

Thank you for contacting the Sophos Community.

Please, submit the sample using this link.

Regards,

It was replaced with text by Puremessage. Puremessage spam and virus definitions ended 2020. 

The XG is uptodate and checks at a 2 hourly interval. General setting malware scanning is set to Sophos. Mail policy is set to use dual scanning. It is ofcourse set to scan in and outgoing email. The e-mail rules also have Smtp and Smtps enabled. Stilll it was cleared by the XG and delivered to Puremessage that detetected as viral based on an outofdate definition database. 

It was replaced with text by Puremessage. Puremessage spam and virus definitions ended 2020. 

The XG is uptodate and checks at a 2 hourly interval. General setting malware scanning is set to Sophos. Mail policy is set to use dual scanning. It is ofcourse set to scan in and outgoing email. The e-mail rules also have Smtp and Smtps enabled. Stilll it was cleared by the XG and delivered to Puremessage that detetected as viral based on an outofdate definition database. 

I have created case 03694098 for this.

I was able to find the .eml file. The .gz file within this .eml file containing the virus is not detected by Endpoint X either. It is only found by Puremessage scanning the mailbox.

Hello Fred,

Thank you for the Case ID.

The email you used to submit the sample in the Web Site is the same you use in the Portal?

Regards,

How do you mean? This eml file submitted in the case is the same email received tru the XG.

The XG is set to drop on malware detection.

Hello Fred,

Sorry I meant to say, the email address you used to submit the sample, not the email itself.

Regards,

Hi Emmanuel,

i used the Sophos website to upload the sample as a file to this case.