[linux] Bitdefender: False positive found in plain text-eMail?

[Urs Martini]

Hi!

I have the av-software bitdefender scanning my in- and outbound
email-traffic on my linux box.

Bitfender works together with amavisd-new and postfix and reliably
cleans each and every virus sent to me.

Two days ago I watched something very strange happen: the virus-scanner
seemed to identify a virus called VBS.Anjulie.A@mm in a pure plain-text-
eMail!

How can this happen??

There is no attachment, no HTML-stuff, no binary code, nothing that
could make bitdefender think that there could be a infected file!

I can't explain this to myself but perhaps there's someone out there
who experienced sth. like that too?

Can it be that the scanner somehow detects the virus-signature in that
plaintext mail? How would this be possible?

Is the bitdefender-av-software buggy?

Bye...
Urs

 

[kurt wismer]

Hi!

I have the av-software bitdefender scanning my in- and outbound
email-traffic on my linux box.

Bitfender works together with amavisd-new and postfix and reliably
cleans each and every virus sent to me.

Two days ago I watched something very strange happen: the virus-scanner
seemed to identify a virus called VBS.Anjulie.A@mm in a pure plain-text-
eMail!

How can this happen??

There is no attachment, no HTML-stuff, no binary code, nothing that
could make bitdefender think that there could be a infected file!

I can't explain this to myself but perhaps there's someone out there
who experienced sth. like that too?

Can it be that the scanner somehow detects the virus-signature in that
plaintext mail? How would this be possible?

vbs based malware are plain-text scripts... perhaps something in the
message header set the av off or perhaps someone cut-n-paste the virus
source into the message body itself...

Is the bitdefender-av-software buggy?

all software has bugs...