John, Thanks for the help!
Regards, JT On Thu, 2006-01-05 at 09:31 -0800, John T (Lists) wrote: > Into the Virus.cfg file: > > BANEZIPEXTS ON > BANZIPEXTS ON > > John T > eServices For You > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of JT > > Sent: Thursday, January 05, 2006 9:20 AM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] Sober.X Variant > > > > John, > > > > What do I need to do to block banned extensions within zip files > > > > Thanks, > > JT > > > > On Thu, 2006-01-05 at 09:14 -0800, John T (Lists) wrote: > > > That means you are not blocking banned extensions within zip files? > > > > > > John T > > > eServices For You > > > > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] > > > > On Behalf Of JT > > > > Sent: Thursday, January 05, 2006 8:45 AM > > > > To: Declude.Virus@declude.com > > > > Subject: RE: [Declude.Virus] Sober.X Variant > > > > > > > > What I am experiencing is that the server lets the virus go through > the > > > > system. It scans and result is clean, the end user gets the email and > > > > their Symantec Enterprise snags it and tags it as [EMAIL PROTECTED] > > > > > > > > On Thu, 2006-01-05 at 08:25 -0800, John T (Lists) wrote: > > > > > Is this what you are seeing? > > > > > > > > > > http://www.sophos.com/virusinfo/analyses/w32feebsa.html > > > > > > > > > > John T > > > > > eServices For You > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > From: [EMAIL PROTECTED] > > > > > [mailto:[EMAIL PROTECTED] > > > > > > On Behalf Of JT > > > > > > Sent: Thursday, January 05, 2006 6:44 AM > > > > > > To: declude.virus@declude.com > > > > > > Subject: [Declude.Virus] Sober.X Variant > > > > > > > > > > > > Has anyone seen an influx of this virus come through? I've > upgraded to > > > > > > the latest F-Prot and it seems like it still sneaking through. > > > Although > > > > > > the Z variant is being stopped by F-prot. Any light that could be > shed > > > > > > on this would be greatly appreciated. > > > > > > > > > > > > Also I've tried setting up ClamAV for Windows on our imail server > as a > > > > > > scanner. I've got it to scan but it randomly generated an exit > code of > > > > > > 50. Does anyone know what exit code 50 from ClamAV means? > > > > > > > > > > > > Thanks, > > > > > > JT > > > > > > > > > > > > --- > > > > > > [This E-mail was scanned for viruses by Declude EVA > www.declude.com] > > > > > > > > > > > > --- > > > > > > This E-mail came from the Declude.Virus mailing list. To > > > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > > > > type "unsubscribe Declude.Virus". The archives can be found > > > > > > at http://www.mail-archive.com. > > > > > > > > > > --- > > > > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > > > > > > > --- > > > > > This E-mail came from the Declude.Virus mailing list. To > > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > > > type "unsubscribe Declude.Virus". The archives can be found > > > > > at http://www.mail-archive.com. > > > > > > > > > > > > > --- > > > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > > > > > --- > > > > This E-mail came from the Declude.Virus mailing list. To > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > > type "unsubscribe Declude.Virus". The archives can be found > > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
