Mail Protection: SMTP, POP3, Antispam and Antivirus VBS/Drop.Agent.inoa - False positive?

UTM Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
+12 person also asked this people also asked this
Locked Locked
Replies 9 replies
Answers 1 answer
Subscribers 16 subscribers
Views 13445 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VBS/Drop.Agent.inoa - False positive?

Christoph Seeger over 7 years ago

Hello folks,

we experience that our Sophos firewall UTM9 is blocking emails with Word attachments. The warning reads: Malware (VBS/Drop.Agent.inoa).

These are normal email senders and receivers as far as we can check.

Is this a false positive by Sophos?

Because when I google the virus name there are no results.

Best Regards

Christoph Seeger

This thread was automatically locked due to age.

Parents

+2 Sander Koorneef over 7 years ago

Hi,

we found out that it is due to the use of the AV dual-scan.
After disabling AVIRA (no dual-scan), and using only the (single) Sophos scan, the DOCX files are OK again.

Regards, Sander Koorneef.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+2 Sander Koorneef over 7 years ago

Hi,

we found out that it is due to the use of the AV dual-scan.
After disabling AVIRA (no dual-scan), and using only the (single) Sophos scan, the DOCX files are OK again.

Regards, Sander Koorneef.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Christoph Seeger over 7 years ago in reply to Sander Koorneef

Hi,

thank you for your answer. That really seems to be the problem.

Now that we know the cause, we just need a fix, 'cause using single scan is not really an option.

I hope, Sophos/Avira does something about it soon.

Regards

Christoph Seeger
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter Hermsen over 7 years ago in reply to Sander Koorneef

It seems to be fixed.

Can anyone else confirm this?
Cancel
Vote Up 0 Vote Down

Cancel