Antivirus Exemption Needed
Zoho Team,
I came across this service from VirusTotal (http://www.virustotal.com/metodos.html) wherein if we have a suspicious file then we can forward it to scan@virustotal.com and they would scan the file and return a report back to us. I just thought I would give a quick try and tested with http://www.eicar.org/anti_virus_test_file.htm but Zoho Antivirus seems to be bouncing back the email with the message like this:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients. This is a permanent error.
scan@virustotal.com Error, ERROR_CODE :554, ERROR_CODE :5.7.1 The file eicar_com.zip has been infected with the virus EICAR_TEST_FILE File quarantined as
Received:from 172.29.247.244 (172.29.247.244 [172.29.247.244]) by mx.zohomail.com
with SMTP id 1273808092629218.81380028465958; Thu, 13 May 2010 20:34:52 -0700 (PDT)
Message-ID:<12894e0fd12.7643666533
528762500.-6784429102229611337@zoho.com>
Date:Thu, 13 May 2010 23:34:52 -0400
From:
User-Agent:Zoho Mail
To:<
scan@virustotal.com>
Subject:(No Subject)
Content-Type:multipart/mixed;
boundary="----=_Part_13203_1690869372.1273808092430"
Here are my queries:
- Who is bouncing this message? VirusTotal server or Zoho Mail Server? The From Address says Zoho Mailer Daemon however since the address is valid and the scan at Zoho happens right at 'Send' button click and hence this is confusing.
- Send Button Virus scan does not seem to be happening.
I would also like to suggest to Zoho if you could have a feature like 'Submit to Virus Total' and when we click that the selected email is forwarded to scan@virustotal.com automatically (subject to the size restriction of VirusTotal which is currently fixed at 20 mega bytes)
----
Deepak Vasudevan
http://thamizhththendral.blogspot.com/