RE: [Declude.Virus] 4.2.20 Error in Log
Do you have a second/external scanner defined. May be the internal scanner (AVG) deletes an attachment and then Declude complains that its gone when it tries to launch the secondary? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, July 12, 2006 05:46 PM To: declude.virus@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.Virus] 4.2.20 Error in Log Since upgrading to 4.2.20 I started seeing the following error: 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories.07/12/2006 00:34:41.328 This only happens when AVG catches a virus. It did not get logged under 3.x version. Nor do I have an On Access Virus Scanner. Anyone else seeing this? Darrell See the log snippet below. 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip [base64; Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED [IRC/BackDoor.SdBot.PMS: 7] 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories.07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip [base64; Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED [IRC/BackDoor.SdBot.PMS: 7] 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] 4.2.20 Error in Log
Andy, Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). I do think its an AVG issue like you suggested. I am trying to find a way to disable the built in AVG virus scanner to see if this message goes away. Darrell Andy Schmidt writes: Do you have a second/external scanner defined. May be the internal scanner (AVG) deletes an attachment and then Declude complains that its gone when it tries to launch the secondary? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, July 12, 2006 05:46 PM To: declude.virus@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.Virus] 4.2.20 Error in Log Since upgrading to 4.2.20 I started seeing the following error: 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories.07/12/2006 00:34:41.328 This only happens when AVG catches a virus. It did not get logged under 3.x version. Nor do I have an On Access Virus Scanner. Anyone else seeing this? Darrell See the log snippet below. 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip [base64; Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED [IRC/BackDoor.SdBot.PMS: 7] 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories.07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip [base64; Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED [IRC/BackDoor.SdBot.PMS: 7] 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 4.2.20 Error in Log
There is a parameter in the Virus.cfg to disable the internal scanner. I don't have it in front of me, but it was in the comments just below the external virus sample. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, July 13, 2006 08:34 AM To: declude.virus@declude.com Subject: Re: [Declude.Virus] 4.2.20 Error in Log Andy, Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). I do think its an AVG issue like you suggested. I am trying to find a way to disable the built in AVG virus scanner to see if this message goes away. Darrell Andy Schmidt writes: > Do you have a second/external scanner defined. > > May be the internal scanner (AVG) deletes an attachment and then > Declude complains that its gone when it tries to launch the secondary? > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax:+1 201 934-9206 > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > ([EMAIL PROTECTED]) > Sent: Wednesday, July 12, 2006 05:46 PM > To: declude.virus@declude.com > Cc: [EMAIL PROTECTED] > Subject: [Declude.Virus] 4.2.20 Error in Log > > > Since upgrading to 4.2.20 I started seeing the following error: > > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > > This only happens when AVG catches a virus. It did not get logged > under 3.x > > version. Nor do I have an On Access Virus Scanner. Anyone else > seeing > this? > > Darrell > > See the log snippet below. > > 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 > q7bca020f6715.smd MIME file: email-details.zip [base64; > Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 > q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; > Length=733 Checksum=67160] > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip > [base64; Length=108312 Checksum=13182423] > 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: > IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories. > > Darrell > > --- > Check out http://www.invariantsystems.com for utilities for Declude, > Imail, > mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, MRTG Integration, and Log Parsers. > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 4.2.20 Error in Log
BUILTINSCANNEROFF Located in Virus.cfg. Will disable the internal AVG scanner. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, July 13, 2006 8:34 AM To: declude.virus@declude.com Subject: Re: [Declude.Virus] 4.2.20 Error in Log Andy, Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). I do think its an AVG issue like you suggested. I am trying to find a way to disable the built in AVG virus scanner to see if this message goes away. Darrell Andy Schmidt writes: > Do you have a second/external scanner defined. > > May be the internal scanner (AVG) deletes an attachment and then > Declude complains that its gone when it tries to launch the secondary? > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax:+1 201 934-9206 > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > ([EMAIL PROTECTED]) > Sent: Wednesday, July 12, 2006 05:46 PM > To: declude.virus@declude.com > Cc: [EMAIL PROTECTED] > Subject: [Declude.Virus] 4.2.20 Error in Log > > > Since upgrading to 4.2.20 I started seeing the following error: > > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files were deleted. You should not use an on-access virus scanner > that scans the \IMail directory or sub-directories.07/12/2006 > 00:34:41.328 > > This only happens when AVG catches a virus. It did not get logged > under 3.x > > version. Nor do I have an On Access Virus Scanner. Anyone else > seeing this? > > Darrell > > See the log snippet below. > > 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > [text/html][7bit; > Length=733 Checksum=67160] > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > email-details.zip [base64; Length=108312 Checksum=13182423] > 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: > IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files were deleted. You should not use an on-access virus scanner > that scans the \IMail directory or sub-directories.07/12/2006 > 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > [text/html][7bit; > Length=733 Checksum=67160] > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > email-details.zip [base64; Length=108312 Checksum=13182423] > 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: > IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files were deleted. You should not use an on-access virus scanner > that scans the \IMail directory or sub-directories. > > Darrell > > --- > Check out http://www.invariantsystems.com for utilities for Declude, > Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, > SURBL/URI integration, MRTG Integration, and Log Parsers. > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 4.2.20 Error in Log
To turn off the internal scanner BUILTINSCANNEROFF Located in Virus.cfg. Will disable the internal AVG scanner. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, July 13, 2006 8:58 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.2.20 Error in Log There is a parameter in the Virus.cfg to disable the internal scanner. I don't have it in front of me, but it was in the comments just below the external virus sample. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, July 13, 2006 08:34 AM To: declude.virus@declude.com Subject: Re: [Declude.Virus] 4.2.20 Error in Log Andy, Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). I do think its an AVG issue like you suggested. I am trying to find a way to disable the built in AVG virus scanner to see if this message goes away. Darrell Andy Schmidt writes: > Do you have a second/external scanner defined. > > May be the internal scanner (AVG) deletes an attachment and then > Declude complains that its gone when it tries to launch the secondary? > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax:+1 201 934-9206 > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > ([EMAIL PROTECTED]) > Sent: Wednesday, July 12, 2006 05:46 PM > To: declude.virus@declude.com > Cc: [EMAIL PROTECTED] > Subject: [Declude.Virus] 4.2.20 Error in Log > > > Since upgrading to 4.2.20 I started seeing the following error: > > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > > This only happens when AVG catches a virus. It did not get logged > under 3.x > > version. Nor do I have an On Access Virus Scanner. Anyone else > seeing > this? > > Darrell > > See the log snippet below. > > 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 > q7bca020f6715.smd MIME file: email-details.zip [base64; > Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 > q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; > Length=733 Checksum=67160] > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip > [base64; Length=108312 Checksum=13182423] > 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: > IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories. > > Darrell > > --- > Check out http://www.invariantsystems.com for utilities for Declude, > Imail, > mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, MRTG Integration, and Log Parsers. > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL
RE: [Declude.Virus] 4.2.20 Error in Log
Your pretty quick for a pinata Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Thursday, July 13, 2006 9:10 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.2.20 Error in Log To turn off the internal scanner BUILTINSCANNEROFF Located in Virus.cfg. Will disable the internal AVG scanner. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, July 13, 2006 8:58 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.2.20 Error in Log There is a parameter in the Virus.cfg to disable the internal scanner. I don't have it in front of me, but it was in the comments just below the external virus sample. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, July 13, 2006 08:34 AM To: declude.virus@declude.com Subject: Re: [Declude.Virus] 4.2.20 Error in Log Andy, Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). I do think its an AVG issue like you suggested. I am trying to find a way to disable the built in AVG virus scanner to see if this message goes away. Darrell Andy Schmidt writes: > Do you have a second/external scanner defined. > > May be the internal scanner (AVG) deletes an attachment and then > Declude complains that its gone when it tries to launch the secondary? > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax:+1 201 934-9206 > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > ([EMAIL PROTECTED]) > Sent: Wednesday, July 12, 2006 05:46 PM > To: declude.virus@declude.com > Cc: [EMAIL PROTECTED] > Subject: [Declude.Virus] 4.2.20 Error in Log > > > Since upgrading to 4.2.20 I started seeing the following error: > > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] > files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > > This only happens when AVG catches a virus. It did not get logged > under 3.x > > version. Nor do I have an On Access Virus Scanner. Anyone else > seeing > this? > > Darrell > > See the log snippet below. > > 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: > [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 > q7bca020f6715.smd MIME file: email-details.zip [base64; > Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 > q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories.07/12/2006 00:34:41.328 > q7bca020f6715.smd Vulnerability flags = 0 > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; > Length=733 Checksum=67160] > 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip > [base64; Length=108312 Checksum=13182423] > 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: > IRC/BackDoor.SdBot.PMS > 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED > [IRC/BackDoor.SdBot.PMS: 7] > 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files > were deleted. You should not use an on-access virus scanner that scans the > \IMail directory or sub-directories. > > Darrell > > --- > Check out http://www.invariantsystems.com for utilities for Declude, > Imail, > mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, MRTG Integration, and Log Parsers. > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- Check out http://www.invariantsystems.com fo
