Sorry, I misunderstood! :) That is a reporting function of the virus
scanner. I use McAfee. If you want to set it up with yours, you can read
more at: http://www.declude.com/virus/manual.htm You can edit the .eml files
to say what you want. I use McAfee and point people to the Norton site
because their site is a little more user friendly.


Craig.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ed Chabot
Sent: Wednesday, August 22, 2001 9:18 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


Craig,
I don't mean the header info but the following:

The infected filename is "flight comfirmation.doc.pif", and the virus name
was " the W32/SirCam@MM virus !!!"

Armed with this information, you can try to clean it by updating your virus
scanner.
If you lack one, you can go to
http://www.symantec.com/avcenter/tools.list.html
and download a removal tool if it is available for your virus. You can learn
more
about the virus at http://www.symantec.com/avcenter/vinfodb.html

When a virus is intercepted, the recipient, the sender and the postmaster
for
either domain is notified automatically. There is no need for you to take
any
action.

Ed Chabot
The Marlin Firearms Company
100 Kenna Drive
North Haven, CT 06473
(203)985-3254

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
Sent: Tuesday, August 21, 2001 2:55 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


In outlook, when you have the message open, View>Options and in the window
pane you will see the full headers, just copy and paste.

Craig.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ed Chabot
Sent: Tuesday, August 21, 2001 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


How did you get all that info in the email from Declude?  Mine only states
the following:

Declude Virus caught a virus with the subject "Snowhite and the Seven
Dwarfs - The REAL story!"
from <> to:  [EMAIL PROTECTED]

The spool file name is Daf9d0f8.SMD.

Ed Chabot
The Marlin Firearms Company
100 Kenna Drive
North Haven, CT 06473
(203)985-3254

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
Sent: Tuesday, August 21, 2001 2:12 PM
To: Declude. Virus List
Subject: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


Guys,

I have one domain on my Imail server running declude. My sales team has
received multiple emails like the one below. Can anyone tell me why
declude/Imail would do this? %localhost% is only supposed to send a
sunbeach.net result. In addition the sales account is a valid account and
not an alias. so why did mail destined for [EMAIL PROTECTED] get in his
mailbox?

Confused,

Craig.


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 21, 2001 1:45 PM
To: [EMAIL PROTECTED]
Subject: WARNING: YOU MAY HAVE A VIRUS
Date: Tue, 21 Aug 2001 13:44:59 -0400

Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: WARNING: YOU MAY HAVE A VIRUS
X-Mailer: <IMail v6.05>
X-UIDL: 883329720
Status: U

The Virus software on bicoltd.com has reported that you sent
a virus with the subject "flight comfirmation" to:
[EMAIL PROTECTED]

The E-mail containing the virus has been quarantined on our servers to
prevent further damage.

The infected filename is "flight comfirmation.doc.pif", and the virus name
was " the W32/SirCam@MM virus !!!"

Armed with this information, you can try to clean it by updating your virus
scanner.
If you lack one, you can go to
http://www.symantec.com/avcenter/tools.list.html
and download a removal tool if it is available for your virus. You can learn
more
about the virus at http://www.symantec.com/avcenter/vinfodb.html

When a virus is intercepted, the recipient, the sender and the postmaster
for
either domain is notified automatically. There is no need for you to take
any
action.


Team SunBeach


D9d8b10e.SMD



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to