Re: [Declude.Virus] NetShield and server Performance
I just installed netshield on my Imail server machine It considerably slows POP performance, even though I exluded the spool directory, the Imail users mailboxes directory, and later tried to exclude the complete Imail drive. still POP3 very slow. It may not really be excluding those directories. You can try copying the eicar.com file ( from http://www.eicar.org ) to the spool directory or one of the users' directorys and see if it gets caught. You can also try excluding the entire \IMail directory and subdirectories, to see if that speeds things up (if so, then there is something in there that is taking a lot of time to scan). -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] v1.27 (beta) released
Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Craig -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, October 11, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] v1.27 (beta) released We have just released Declude Virus v1.27. The main change is that it adds the ability to pre-scan HTML files (for Declude Virus Pro). When you add PRESCAN ON to the \IMail\Declude\virus.cfg file (for the Pro version only), Declude Virus will pre-scan HTML files. E-mail with HTML (but no other attachments or non-text MIME segments) files typically account for about 80% to 90% of E-mail traffic, but rarely contain viruses. They still need to be scanned, because there are some HTML viruses (such as Kak.worm). Scanning all this extra traffic (thanks to Microsoft, for pushing HTML even when it isn't needed) uses lots of CPU time. With th This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] v1.27 (beta) released
Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Yes, Yes, Yes :)) - Original Message - From: Craig Gittens [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:40 PM Subject: RE: [Declude.Virus] v1.27 (beta) released Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Craig -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, October 11, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] v1.27 (beta) released We have just released Declude Virus v1.27. The main change is that it adds the ability to pre-scan HTML files (for Declude Virus Pro). When you add PRESCAN ON to the \IMail\Declude\virus.cfg file (for the Pro version only), Declude Virus will pre-scan HTML files. E-mail with HTML (but no other attachments or non-text MIME segments) files typically account for about 80% to 90% of E-mail traffic, but rarely contain viruses. They still need to be scanned, because there are some HTML viruses (such as Kak.worm). Scanning all this extra traffic (thanks to Microsoft, for pushing HTML even when it isn't needed) uses lots of CPU time. With th This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] McAfee NetShield Upgrade
thanks just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both said I have the latest engine and dat files the about netshield has: Netshield for windows NT and W 2000 4.5 Virus def 4.0.4165 Scan engine 4.0.70 What is going on ? how can I get the new engines ? I just got my CD last week ? - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:23 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:22 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Hi jerry, few questions if you have the time: 1- I keep getting this type of alert from netshield: The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken too long to complete and is being canceled. Scan engine version used is 4.0.70 DAT version 4.0.4164. How can avoid this, is there a timeout or a time limit I can change ? 2- I am playing with ME (management edition), I downloaded and saved latest DAT with netshield, and used it to updated other machienes with netshield, but could not use it on machines with Viruscan, it gives a message that it could not get update.ini any idea what to do ? 3- can/should we use sdat with ME ? TIA - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 7:10 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Yes. - Original Message - From: Charles Stanley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:06 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade At 12:03 PM 10/11/01, you wrote: If you just mean the engine, download and run the latest SDAT.exe. This will update the engine for the server version of Netshield? This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] McAfee NetShield Upgrade
ftp://ftp.nai.com/pub/antivirus/superdat/intel/sdat4164.exe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Thursday, October 11, 2001 4:57 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] McAfee NetShield Upgrade thanks just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both said I have the latest engine and dat files the about netshield has: Netshield for windows NT and W 2000 4.5 Virus def 4.0.4165 Scan engine 4.0.70 What is going on ? how can I get the new engines ? I just got my CD last week ? - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:23 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:22 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Hi jerry, few questions if you have the time: 1- I keep getting this type of alert from netshield: The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken too long to complete and is being canceled. Scan engine version used is 4.0.70 DAT version 4.0.4164. How can avoid this, is there a timeout or a time limit I can change ? 2- I am playing with ME (management edition), I downloaded and saved latest DAT with netshield, and used it to updated other machienes with netshield, but could not use it on machines with Viruscan, it gives a message that it could not get update.ini any idea what to do ? 3- can/should we use sdat with ME ? TIA - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 7:10 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Yes. - Original Message - From: Charles Stanley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:06 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade At 12:03 PM 10/11/01, you wrote: If you just mean the engine, download and run the latest SDAT.exe. This will update the engine for the server version of Netshield? This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] McAfee NetShield Upgrade
At 01:23 PM 10/11/01, you wrote: 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. Is there a URL available for the SDAT? I've been searching McAfee's site for way too long, no luck... This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] McAfee NetShield Upgrade
At 03:47 PM 10/11/01, you wrote: At 01:23 PM 10/11/01, you wrote: 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. Is there a URL available for the SDAT? I've been searching McAfee's site for way too long, no luck... Disregard please, ftp://ftp.nai.com/pub/antivirus/superdat/intel/sdat4164.exe is no longer valid, but ftp://ftp.nai.com/pub/antivirus/superdat/intel/ seems to contain the SDAT.
RE: [Declude.Virus] v1.27 (beta) released
Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? That should make it to 1.27a, which may be released within the next few days (or possibly sometime next week). -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Configuration
Declude: Please do not use the registry or anything MS for saving configuration. Gui Admins: Take a little time to learn the power of batch files and scripting. Not only will you never succumb to carpal tunnel, you may actually find that you can automate 85% of what you currently do with a mouse.The realsweet spot is that if you can do it with a command prompt, you can do it from anywhere, securely.I like the fact that I don't /have/ to be in the office to do my job. I alsolike the fact that declude is small, efficient, and simple. Something you don't see alot these days... Kudos to declude.
Re: [Declude.Virus] McAfee NetShield Upgrade
upgraded to engine 4.1.5, but still getting the timout alerts do you know what are these ? The scan of E:\McAfee\SecureCast\ESC_55SP2.zip\ESC_55SP2.EXE has taken too long to complete and is being canceled. Scan engine version used is 4.1.50 DAT version 4.0.4165 - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 10:04 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 4100 is over a year old. Get the latest 4165 from the mcafee site. Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 4:57 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade thanks just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both said I have the latest engine and dat files the about netshield has: Netshield for windows NT and W 2000 4.5 Virus def 4.0.4165 Scan engine 4.0.70 What is going on ? how can I get the new engines ? I just got my CD last week ? - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:23 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:22 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Hi jerry, few questions if you have the time: 1- I keep getting this type of alert from netshield: The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken too long to complete and is being canceled. Scan engine version used is 4.0.70 DAT version 4.0.4164. How can avoid this, is there a timeout or a time limit I can change ? 2- I am playing with ME (management edition), I downloaded and saved latest DAT with netshield, and used it to updated other machienes with netshield, but could not use it on machines with Viruscan, it gives a message that it could not get update.ini any idea what to do ? 3- can/should we use sdat with ME ? TIA - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 7:10 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Yes. - Original Message - From: Charles Stanley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:06 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade At 12:03 PM 10/11/01, you wrote: If you just mean the engine, download and run the latest SDAT.exe. This will update the engine for the server version of Netshield? This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED],
