Google Message Security for Google Apps Administration Guide - Manual (Page 198)

198 Message Security for Google Apps Administration Guide
If the virus was delivered after the protection date and time determined above,
then compare the file size of the virus attachment with the documented size of
the virus listed on the web site of McAfee or Authentium. If the size of your
virus is significantly smaller, then follow the resolution below. Otherwise,
proceed to the next step.
Resolution: The virus payload was truncated, making the virus inert and
preventing detection. Viruses like this can be deleted since they pose no
threat.
3. If you are still unable to find it, the submit a copy of the original virus-
infected message as an attachment or as comments to Support.
Support escalates to McAfee and/or Authentium in the event they are not
aware of the virus.
Virus Blocking seems to block legitimate messages.
Virus Blocking either quarantines or blocks all fragmented messages, since
fragmented messages cannot be properly scanned. Message fragmenting is not
used widely since most mail messages can be sent within the SMTP standard
using the common networking technologies and processing power of today’s
computers.
See “Configure Virus Settings for an Organization” on page 192 for details on the
Virus Fragment Blocking setting.