Markus, 3.16b here, but only 3 hits so far for this on a busy server, so it's not necessarily common. I was able to capture one of these and it appears to be hitting at least E-mails generated in "Microsoft Word 11". <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">I have no clue what the pattern is that it is hitting of course, but I assume that F-Prot just simply added an overbroad rule. Most E-mail isn't constructed anything like what Microsoft Word creates. Matt Markus Gufler wrote: Question: Have you all running the latest v3.16b ? I can't see any appearance of "HTML/ObjData" in the entire current logfile, but I've still running 3.16aMarkus-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists) Sent: Monday, May 02, 2005 7:47 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] F-Prot and HTML object exploit It appears that something has updated on F-Prot in the last hour. Now, a lot of outbound HTML e-mails are being flagged by F-Prot as having the HTML object exploit. Running the file on www.virustotal.com shows clean. Any one else seeing problems? For now, as I am at a client, I have turned off F-Prot scanning relying on AVG. John T eServices For You --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== |
- Re: [Declude.Virus] F-Prot and HTML object explo... Matt
- Re: [Declude.Virus] F-Prot and HTML object ... Don Hickey
- RE: [Declude.Virus] F-Prot and HTML obj... John Tolmachoff \(Lists\)
- Re: [Declude.Virus] F-Prot and HTML object explo... Wind
- Re: [Declude.Virus] F-Prot and HTML object ... Kevin Rogers
- Re: [Declude.Virus] F-Prot and HTML object explo... Bill Landry
- Re: [Declude.Virus] F-Prot and HTML object ... Jeff
- Re: [Declude.Virus] F-Prot and HTML obj... Bill Landry
- Re: [Declude.Virus] F-Prot and HTML... Kevin Rogers
- RE: [Declude.Virus] F-Prot and HTML object explo... Markus Gufler
- RE: [Declude.Virus] F-Prot and HTML object explo... Colbeck, Andrew
- Re: [Declude.Virus] F-Prot and HTML object ... Kevin Rogers
- Re: [Declude.Virus] F-Prot and HTML obj... Bill Landry
- RE: [Declude.Virus] F-Prot and HTML object explo... Colbeck, Andrew
- RE: [Declude.Virus] F-Prot and HTML object explo... Colbeck, Andrew