MailScanner: How do I know if an email has a virus or is classed as spam?

There are two methods used to identify these emails to you. Firstly, the subject line of the affected email will be prefixed with one of the following:

  • {Disarmed} - indicates that the email contained html tags that are considered dangerous, e.g. iframe and form tags
  • {Virus?} - indicates that the email contained a virus and has had the attachment removed.
  • {Filename?} - indicates that the email contained a dangerous file attachment which has been removed.
  • {Fraud?} - indicates the e-mail may be fraudulent or designed to collect personal information from you.
  • {Spam?} - indicates that the email is likely to be spam - you should filter these emails into a separate folder in your email client.
  • {Definitely Spam?} - indicates that the email is almost definitely spam because it got a very high detection score - you should filter these emails into a separate folder in your email client.

Secondly, additional headers are added to the email:

  • X-GeekInternetAU-VirusCheck: Found to be clean - indicates that the email passed the virus scanning tests.
  • X-GeekInternetAU-VirusCheck: Found to be infected - indicates that email email contained a virus which has been removed.
  • X-GeekInternetAU-SpamCheck: spam - indicates that the email is likely to be spam and contains information on how the score was reached.
  • X-GeekInternetAU-SpamScore: ssssss - indicates the spam score for the email. Each s represents 1 point, so sssss indicates a score of 5. The service has a default threshold of 5 for {Spam?} and 20 for {Definitely Spam?}

You can configure your email client to filter these emails into seperate folders using a filter based on the Subject line or Email headers.

  • 6 Users Found This Useful
Was this answer helpful?
Related Articles