Knowledgebase

MailScanner: How do I know if an email has a virus or is classed as spam?

  • 6

There are two methods used to identify these emails to you. Firstly, the subject line of the affected email will be prefixed with one of the following:

  • {Disarmed} - indicates that the email contained html tags that are considered dangerous, e.g. iframe and form tags
  • {Virus?} - indicates that the email contained a virus and has had the attachment removed.
  • {Filename?} - indicates that the email contained a dangerous file attachment which has been removed.
  • {Fraud?} - indicates the e-mail may be fraudulent or designed to collect personal information from you.
  • {Spam?} - indicates that the email is likely to be spam - you should filter these emails into a separate folder in your email client.
  • {Definitely Spam?} - indicates that the email is almost definitely spam because it got a very high detection score - you should filter these emails into a separate folder in your email client.

Secondly, additional headers are added to the email:

  • X-GeekInternetAU-VirusCheck: Found to be clean - indicates that the email passed the virus scanning tests.
  • X-GeekInternetAU-VirusCheck: Found to be infected - indicates that email email contained a virus which has been removed.
  • X-GeekInternetAU-SpamCheck: spam - indicates that the email is likely to be spam and contains information on how the score was reached.
  • X-GeekInternetAU-SpamScore: ssssss - indicates the spam score for the email. Each s represents 1 point, so sssss indicates a score of 5. The service has a default threshold of 5 for {Spam?} and 20 for {Definitely Spam?}

You can configure your email client to filter these emails into seperate folders using a filter based on the Subject line or Email headers.


Was this answer helpful?