Email based HTML/Iframe.B.Gen virus

Hello everyone.

Quick question.

We use Messagelabs and NOD v3 for our virus protection.

We keep getting emails from a user who works for a supplier in China that comes through with the HTML/Iframe.B.Gen virus. Messagelabs doesn't pick it up - but NOD does.

We are quite confident that because Messagelabs has not picked this virus up that it will be a false positive - but I still have a nagging doubt. This is being picked up on emails from this one user - not when surfin the web like other users who have reported this.

I have spoken to the user in question - and asked her IT team to do a deep scan on her PC to make sure it is clean and her IT team say it is (not sure what AV they use).

Is there a way I can tell if it is a false positive?

Thanks guys
A

 

Is the user familiar with the iframed url?