RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2001-08-21 Thread Craig Gittens

In outlook, when you have the message open, ViewOptions and in the window
pane you will see the full headers, just copy and paste.

Craig.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ed Chabot
Sent: Tuesday, August 21, 2001 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


How did you get all that info in the email from Declude?  Mine only states
the following:

Declude Virus caught a virus with the subject Snowhite and the Seven
Dwarfs - The REAL story!
from  to:  [EMAIL PROTECTED]

The spool file name is Daf9d0f8.SMD.

Ed Chabot
The Marlin Firearms Company
100 Kenna Drive
North Haven, CT 06473
(203)985-3254

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
Sent: Tuesday, August 21, 2001 2:12 PM
To: Declude. Virus List
Subject: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


Guys,

I have one domain on my Imail server running declude. My sales team has
received multiple emails like the one below. Can anyone tell me why
declude/Imail would do this? %localhost% is only supposed to send a
sunbeach.net result. In addition the sales account is a valid account and
not an alias. so why did mail destined for [EMAIL PROTECTED] get in his
mailbox?

Confused,

Craig.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 21, 2001 1:45 PM
To: [EMAIL PROTECTED]
Subject: WARNING: YOU MAY HAVE A VIRUS
Date: Tue, 21 Aug 2001 13:44:59 -0400

Message-Id: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: WARNING: YOU MAY HAVE A VIRUS
X-Mailer: IMail v6.05
X-UIDL: 883329720
Status: U

The Virus software on bicoltd.com has reported that you sent
a virus with the subject flight comfirmation to:
[EMAIL PROTECTED]

The E-mail containing the virus has been quarantined on our servers to
prevent further damage.

The infected filename is flight comfirmation.doc.pif, and the virus name
was  the W32/SirCam@MM virus !!!

Armed with this information, you can try to clean it by updating your virus
scanner.
If you lack one, you can go to
http://www.symantec.com/avcenter/tools.list.html
and download a removal tool if it is available for your virus. You can learn
more
about the virus at http://www.symantec.com/avcenter/vinfodb.html

When a virus is intercepted, the recipient, the sender and the postmaster
for
either domain is notified automatically. There is no need for you to take
any
action.


Team SunBeach


D9d8b10e.SMD



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2001-08-21 Thread R. Scott Perry


How did you get all that info in the email from Declude?  Mine only states
the following:

Declude Virus caught a virus with the subject Snowhite and the Seven
Dwarfs - The REAL story!
from  to:  [EMAIL PROTECTED]

The spool file name is Daf9d0f8.SMD.

The E-mail template files are fully customizeable.  You can look in the 
E-mail Notifications section of the manual for information on the 
variables you can use in there.  I believe that the templates have recently 
been updated to include more information in them.
 -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2001-08-21 Thread R. Scott Perry


I get that. But why did Imail drop the email into [EMAIL PROTECTED] account
which is the only domain on the server? Why did it not send it off to the
correct place?

The %LOCALHOST% variable will return the domain of the local user (the one 
on your domain).  If the person is relaying their mail (neither the sender 
nor the recipient are local), %LOCALHOST% will now use the master host name 
(so that it truly is local).
-Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2001-08-21 Thread David Daniels

You have to edit the default emails that come with Declude. Scott has
instructions on his site.

David Daniels
System Administrator
Starfish Internet Service
[EMAIL PROTECTED]
Clicking my fingers to the bone
- Original Message -
From: Ed Chabot [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 21, 2001 2:40 PM
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


 How did you get all that info in the email from Declude?  Mine only states
 the following:

 Declude Virus caught a virus with the subject Snowhite and the Seven
 Dwarfs - The REAL story!
 from  to:  [EMAIL PROTECTED]

 The spool file name is Daf9d0f8.SMD.

 Ed Chabot
 The Marlin Firearms Company
 100 Kenna Drive
 North Haven, CT 06473
 (203)985-3254

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
 Sent: Tuesday, August 21, 2001 2:12 PM
 To: Declude. Virus List
 Subject: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS


 Guys,

 I have one domain on my Imail server running declude. My sales team has
 received multiple emails like the one below. Can anyone tell me why
 declude/Imail would do this? %localhost% is only supposed to send a
 sunbeach.net result. In addition the sales account is a valid account and
 not an alias. so why did mail destined for [EMAIL PROTECTED] get in his
 mailbox?

 Confused,

 Craig.


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 21, 2001 1:45 PM
 To: [EMAIL PROTECTED]
 Subject: WARNING: YOU MAY HAVE A VIRUS
 Date: Tue, 21 Aug 2001 13:44:59 -0400

 Message-Id: [EMAIL PROTECTED]
 Mime-Version: 1.0
 Content-Type: text/plain; charset=us-ascii
 From: [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: WARNING: YOU MAY HAVE A VIRUS
 X-Mailer: IMail v6.05
 X-UIDL: 883329720
 Status: U

 The Virus software on bicoltd.com has reported that you sent
 a virus with the subject flight comfirmation to:
 [EMAIL PROTECTED]

 The E-mail containing the virus has been quarantined on our servers to
 prevent further damage.

 The infected filename is flight comfirmation.doc.pif, and the virus name
 was  the W32/SirCam@MM virus !!!

 Armed with this information, you can try to clean it by updating your
virus
 scanner.
 If you lack one, you can go to
 http://www.symantec.com/avcenter/tools.list.html
 and download a removal tool if it is available for your virus. You can
learn
 more
 about the virus at http://www.symantec.com/avcenter/vinfodb.html

 When a virus is intercepted, the recipient, the sender and the postmaster
 for
 either domain is notified automatically. There is no need for you to take
 any
 action.


 Team SunBeach


 D9d8b10e.SMD



 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .


This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] CF stuff

2001-08-21 Thread Craig Gittens

I am now playing with Cold Fusion and have created a little app that will
query the database for a username or part thereof. It will then allow you to
change the password or fullname from the output (that is all I wanted to
change but it is configurable).

Anyone interested in a copy? It is tiny but I would ask before I posted my
inexperience here...

Here is the Query info from CF:
Queries

MAIL (Records=116, Time=47ms)
SQL =
select USERID,PASSWORD,FULLNAME,Row_Id from sunbeach_net where USERID like
'%cr%' order by USERID


Are there any SQL experts here? I am wondering if my previous troubles with
the sales email address have to do with the SQL server? But the SQL server
hasn't been over 2% CPU Usage for 2 weeks. It is a PII 350 with 256MB Ram
and is used for about 14,000 email addresses. Is the above query time
adequate?


Craig

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .