When i run a manual scan looking for a file say attachment_name.doc Symantec incorrectly identifies some messages as have the file attached, when the message never had an attachment and then symantec replaces (the ghost attachment) with its quarantine.txt file.
Let me try to explain this better:
1) I sent an email to my boss this morning with no attachments at all.
2) I started a manual scan looking for 4 different file names and select about 10 mailboxes
3) I was looking for any attachments named Attachment.doc, Load.doc, House.doc etc.
4) THe emails that did have the attachments were scanned and the attachments were removed
5) The email to my boos (step 1) that had no attachments at all, was also scanned (as expected) and then Symantec replaced the non existent attachment with a notification that the attachment (that didnt exist on that message) was removed?
What the hell? Any ideas?
I opened a case with Symantec to see what they can find. but i dont get how that could ahve occurred.
Thanks,
Robert