ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

EML/Worm.xx.dam in Email Security.cloud AntiVirus

book

Article ID: 161431

calendar_today

Updated On:

Products

Email Security.cloud

Issue/Introduction

An email sent or recieve is stopped as malicious and identifies the virus as EML/Worm.xx.dam

Resolution

Sometimes a file that does not contain a virus is stopped. The file gets blocked in this situation because another antivirus company cleaned the file first. We cannot guarantee that the file has been cleaned completely; therefore, our stance is to stop it.
 
The message that we intercept has the EML/Worm.xx.dam naming convention, where xx is an acronym of the antivirus software that inserted the warning or disclaimer.
 
This list contains all the antivirus software acronyms you find it in the EML/Worm.xx.dam:
 
AA = We are not sure what product "cleaned" it
AB = WebShield
AD = antivirus Defense
AE = Antigen for exchange
AM = Armour Virus Control
BT = BT
CA = Computer Associates AntiGen
EM = eManager
ES = Esafe
FS = F-Secure
GE = Groupshield
IP = Israel Patents
KWF = Kerio WinRoute Firewall
MD = MIMEDefang
MS = MailScanner
NA = Norton
NO = Norman
PN = Panda
RA = Rav antivirus
RR = RoadRunner
SM = ScanMail
SN = snapmail
SS = Stompsoft
T3 = TC3Net E-Mail Virus Protection Service
VW = InterScan E-Mail VirusWall
WF = WatchGuard Firebox
WSH = WebShield
WS = WebShield (2)
T3 = TC3Net E-Mail Virus Protection Service
VW = Interscan
VW2 = InterScan Messaging Security Suite
XX = We are unsure which virus scanner cleaned this file 

Powered by Wolken Software