Thanks Scott. One more question. I'm new at Declude. I saw that you add the BANEXT EZIP to the Virus.cfg file, which I did. How would you block all .zip files all together? We use F-prot for our virus scan. Would that be a setting on the i-mail or on declude?
Tim Cook Varsity Contractors IT Technical Support (208) 232-8599 x335 [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Wednesday, March 03, 2004 3:51 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] New virus Bagle.J can't be caught by some standard virus scanners At a command prompt. Change to the directory declude.exe is in. It's in my imail folder. Run declude -diag v1.78i9 is your choice for the zip virus additions. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 03/03/04 04:24PM >>> How do you check to see what version you are running? I just updated to the latest interim release, but can't fine where it says which version I'm running of declude Tim Cook Varsity Contractors IT Technical Support (208) 232-8599 x335 [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Hayer Sent: Wednesday, March 03, 2004 3:06 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some standard virus scanners > I did a test using your tools page sending myself both > "eicarencodedzip" and "eicardynamicencodedzip" and they both went > through. > > I have BANEXT EZIP on my virus.cfg. where will i look next? I think these requests should be on the declude virus list.. however - I would check the ver you are running. It works for me ver 1.78i9 Hope this helps -Nick Hayer > > Tito > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, March 03, 2004 1:03 PM > Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some > standard virus scanners > > > > > > >Was that one a true dynamic .J variant? It was blocked > > >successfully and > I > > >thought it might have been one of the static encrypted variants. > > > > There's no need to play with fire (live viruses). Our Test Virus > > Sender > at > > http://www.declude.com/tools lets you test your setup without [1] > > risking getting a virus, [2] risking legal issues with intentionally > > sending live dangerous viruses, [3] guessing what virus you have, > > etc. > > > > If either the "eicarencodedzip" or "eicardynamicencodedzip" files do > > not get caught from that page, viruses will definitely get through > > you mailserver AV software. If they both get blocked, you are > > probably safe. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail > > mailservers since 2000. Declude Virus: Catches known viruses and is > > the leader in mailserver vulnerability detection. Find out what > > you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > List Archive: > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge > Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
