I'm having some problems in interpreting the monitor statistics for incoming emails with matching virus, I have receive an email from a sender that was detected as suspected spam(srbs -1.9) and that a virus was detected on the email but the statistics overview report 0 virus detected and the virus types detect 2 virus types
Based on this appears it appears to be the right behavior based on the current algorithms that calculate the counts.
The discrepancy is explained by the way messages are categorized in reporting. The Overview page does not double-count messages, which have already been determined as spam. Messages traversing the processing pipeline are scanned by the anti-spam engine first. If the verdict is suspect or positive, the counter for 'Spam Detected' is incremented, and the counter for 'Virus Detected' will not be � even if they contain a virus. If a virus is found, it can be viewed separately in the Virus Types report.