Google Message Security Batch Reference Guide - Manual (Page 324)

336
Notes
When a virus is detected, the Message Security service inserts the X-pstnvirus
header to show what virus was caught. The format of the header when a virus is
detected by McAfee is:
X-pstnvirus: McAfee_Virus_Name
For further details on one of these viruses, you can search for McAfee_Virus_Name
at the McAfee Virus Information Library site:
http://vil.nai.com
The format of the header for the Authentium Antivirus engine (an optional feature
for service packages) which scans inbound messages:
X-pstnvirus: AUTH-Authentium_Virus_Name
The text AUTH- is not part of the virus name. The text indicates that the virus was
not detected by the McAfee engine, and was caught by Authentium. For further
details on a virus caught by Authentium Antivirus, you can search for
Authentium_Virus_Name on the
http://www.authentium.com/support/AVMatrix/portal.aspx
Following are examples of the same virus if detected by McAfee or Authentium:
X-pstnvirus: W32/Mydoom.bb@MM
X-pstnvirus: AUTH-W32/Mydoom.AY@mm
Messages with the X-pstnvirus header will be delivered to your users only in the
following cases:
• Virus disposition is set to Message Header Tagging for the organization that
contains the user. In this case, all viruses will be tagged with the header and
delivered to your mail server.
• The administrator (or user, if allowed) delivers the infected or cleaned virus to
the user.
The X-pstnvirus header is omitted only when virus protection is not enabled for
a user, or there is no Message Security service user associated with the
recipient’s address.
Related Commands
• Output: displayorg
• Input: modifyorg
• Related: modifydomain