Re: [Declude.Virus] Amazon ad caught as virus

2002-09-25 Thread Dan Shadix

I don't think that it's really something that Amazon is doing wrong.  If 
they called themselves Amazon without .com it wouldn't trigger the 
BANEXT but that doesn't mean they shouldn't be able to use their real 
name.  That said, if the way it is now is safer than the way it used to 
be I'd like to keep the more stringent check.  Even better would be an 
option to do it either way.

Dan

John Tolmachoff wrote:
 Scott, being that this is a rare occurance, why not leaves it the way it
 is and let Amazon be flooded with all the notices.
 
 Maybe they will get wise and correct the problem.
 
 John Tolmachoff
 IT Manager, Network Engineer
 RelianceSoft, Inc.
 Fullerton, CA  92835
 www.reliancesoft.com
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
 Sent: Tuesday, September 24, 2002 4:58 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] Amazon ad caught as virus
 
 
 
I have had hundreds of the Amazon AD here as I'm sure has everyone
 
 else.
 
Before I go asking for an interim release I will ask how common the
 
 problem
 
that caught the Amazon Ad is. The Amazon email was rejected as a com
attachment. I assume all similar emails would be the same given the
 
 format
 
of the lowley com file. Is this likely to be a more frequent
 
 occurrence.
 
And, has it happen more often than we realized but just didn't see it
because of low volume. A major ad campaign certainly brought it to our
attention.
 
 
 It took just over 5 months from the time Declude Virus first would start
 to 
 catch these before we received our first report of the problem, so I
 would 
 say it would be a rare occurrence (with this one exception).
 -Scott
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Management Question

2002-09-25 Thread R. Scott Perry


But I need to know more about managing the files quarantined by the program.
Are all the files in the virus folder infected?

All of the files in the \IMail\spool\virus directory are ones that Declude 
Virus caught, either because the virus scanner detected a virus, or because 
Declude Virus detected a vulnerability.

F-prot lists the Klez as non-disenfected, but that is about 50% of the files.

Note that the viruses almost certainly cannot be cleaned (as they are 
encoded).  However, you probably do not want them cleaned anyways, as Klez 
can send confidential documents along with the virus.

What is the appropriate action with the files in the folder?

In most cases, the appropriate action is to delete the E-mail (or, archive 
them just in case if company policy so requires).

The exception would be if an important E-mail was sent with a virus, and 
needed to be retrieved without the sender re-sending it.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] Imail relay - will declude scan for virus.

2002-09-25 Thread Timothy C. Bohen

We have a customer that wants to run their own mail server. If I setup imail
to act as a relay can I provide them with virus scanning using our declude?

Thanks



Timothy C. Bohen
CMSInter.Net LLC / Crystal MicroSystems LLC
===
web  : www.cmsinter.net
email: [EMAIL PROTECTED]
phone: 989.235.5100 x222
fax  : 989.235.5151

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Declude Virus v1.61 (beta) released

2002-09-25 Thread Mark Seagroves

Scott,

We have both Declude and JunkMail.  Does it matter whether I download 
declude updates from /virus or /junkmail?

Thanks.

Mark

At 08:47 AM 9/23/2002, you wrote:
We have just released Declude Virus v1.61 (beta).  See 
http://www.declude.com/virus/manual.htm .  Changes include:

o Adds detection of numerous new vulnerabilities.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Mark Seagroves  voice: (865) 471-3506
Dir, Campus Computing   fax: (865) 471-3555
Asst Prof, Computer Science e-mail:  [EMAIL PROTECTED]
Carson-Newman College



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] Junkmail Question

2002-09-25 Thread Doug McKee

Is this the appropriate list or is there another for Junkmail?
Are users added individually or just domains?
Thanks,
Doug
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Management Question

2002-09-25 Thread Doug McKee


The exception would be if an important E-mail was sent with a virus, and 
needed to be retrieved without the sender re-sending it.
 -Scott

Scott,
How is that important email identified?
Doug
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Management Question

2002-09-25 Thread R. Scott Perry


The exception would be if an important E-mail was sent with a virus, and
needed to be retrieved without the sender re-sending it.

How is that important email identified?

However you want to define it.  In most cases, it involves the CEO of a 
company getting an E-mail from the CEO of another company, who has a 
virus.  The E-mail gets caught because it has a virus.  The CEO of your 
company is told that he should ask the CEO of the other company to get rid 
of the virus and re-send the E-mail.  Your CEO is afraid of asking the 
other CEO to do that, so he asks you to retrieve the original E-mail.

Personally, I feel that no E-mail that is sent with a virus is important 
enough to retrieve, and that it should be re-sent after the sender removes 
the virus.  But, if the boss feels otherwise...
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Management Question

2002-09-25 Thread Doug McKee

I understand that component of important
What I meand is how is it labeled by declude so I can find it should the
need ever arise?
Doug

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.