Are you running the real time scanner on the spool folder. Disable the real time scanner if it is running.
Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Mario Antonio > Sent: Tuesday, October 31, 2006 11:38 AM > To: declude.virus@declude.com > Subject: Re: [Declude.Virus] Hijack Question > > David, > > I am running f-prot 3.16f > Take a look at my configs > > SCANFILE C:\f-prot_windows\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 > /PACKED /NOBOOT /DUMB /REPORT=report.txt > VIRUSCODE 3 > VIRUSCODE 6 > VIRUSCODE 8 > REPORT Infection: > > > Any suggestions? > > > Regards > > Mario Antonio > > > ----- Original Message ----- > From: "David Barker" <[EMAIL PROTECTED]> > To: <declude.virus@declude.com> > Sent: Tuesday, October 31, 2006 1:58 PM > Subject: RE: [Declude.Virus] Hijack Question > > > > There should not be orphan files I would think you are running some > type > of > > virus scanner that is removing the D*.smd files from the \work > directory. > > > > David B > > www.declude.com > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Mario > > Antonio > > Sent: Tuesday, October 31, 2006 11:50 AM > > To: declude.virus@declude.com > > Subject: Re: [Declude.Virus] Hijack Question > > > > David, > > > > One more question, > > > > I am seeing that some Q files remain in the spool\proc\work folder, > is > this > > normal? > > why? > > Should I clean them manually? Where are the corresponding D files? > > > > Regards > > > > Mario Antonio > > > > > > > > ----- Original Message ----- > > From: "David Barker" <[EMAIL PROTECTED]> > > To: <declude.virus@declude.com> > > Sent: Tuesday, October 31, 2006 10:18 AM > > Subject: RE: [Declude.Virus] Hijack Question > > > > > > > Stop/Start the decludeproc will reset the hijack counter. > > > > > > David B > > > www.declude.com > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Mario > > > Antonio > > > Sent: Tuesday, October 31, 2006 9:42 AM > > > To: declude.virus@declude.com > > > Subject: [Declude.Virus] Hijack Question > > > > > > Does anyone know if you have to restart the declude process after > you > have > > > moved back files from the HOLD2 folder into the spool ---Declude > > > 3.0.5/Imail 8.22? > > > > > > In the Declude 2.X you had to close the foreground screen/console > (which > > > restarts Hijack) in order to clean all the IP addresses that have > been > > > banned. > > > > > > > > > Regards > > > > > > Mario Antonio > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > just > > > send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.