Unscannable '0x0' body.scan

andre.hoffmann_ironport · ‎03-19-2008

Hi,

what does it mean ?
An email with 10MB included 7 zip-files moves the email in virus-quarantine as A/V unscannable.

The Test-Button in Quarantine brings me the following result:

Anti-Virus scan result was:
Sophos: Unscannable '0x0' body.scan

The email seems to be ok. The text and the attachment looks like a communication between two business partner. (in german)

What can i do ?

jaigill · ‎03-25-2008

Can you search for this message in the Ironport mail logs? The Ironport mail logs may show additional details on why the message was rendered unscannable.

Wed Mar 19 11:51:07 2007 Info: MID 17224015 antivirus unscannable '0x0'
Scanning Timeout

The above log line indicates that the antivirus engine was not able to scan the message within the configured timeout interval. Increasing AV timeout can help in a scenario like this.

andre.hoffmann_ironport · ‎03-26-2008


Wed Mar 19 11:51:07 2007 Info: MID 17224015 antivirus unscannable '0x0'
Scanning Timeout

The above log line indicates that the antivirus engine was not able to scan the message within the configured timeout interval. Increasing AV timeout can help in a scenario like this.

Thanks it was this line in the log. I will try 90s