Re: [Declude.Virus] "Could not find report file"

2003-07-16 Thread Bill Landry
Diagnostics ON (Declude v1.70i20).

Declude JunkMail:  Config file found (M:\IMail\Declude\global.CFG).
Declude Virus: Config file found (M:\IMail\Declude\Virus.CFG).
Declude Hijack:Not installed (no M:\IMail\Declude\Hijack.CFG file).
Declude Confirm:   Not installed (no M:\IMail\Declude\Confirm.CFG file).

Declude JunkMail Status: PRO version registered.
Declude Virus Status:Pro Version Registered.
Declude Hijack Status:   NOT REGISTERED: No activation code.

- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 16, 2003 3:52 PM
Subject: Re: [Declude.Virus] "Could not find report file"


>
> >I baffled as to why Declude Virus Pro is suddenly not able to find the
> >report file.  Nothing has changed from earlier this morning till now.
The
> >last F-Prot update was yesterday afternoon and Declude has not been
updated
> >today.  Any ideas why Declude might be having this problem?
>
> What version of Declude are you running?
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you have been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] "Could not find report file"

2003-07-16 Thread R. Scott Perry

I baffled as to why Declude Virus Pro is suddenly not able to find the
report file.  Nothing has changed from earlier this morning till now.  The
last F-Prot update was yesterday afternoon and Declude has not been updated
today.  Any ideas why Declude might be having this problem?
What version of Declude are you running?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] "Could not find report file"

2003-07-16 Thread Bill Landry
I baffled as to why Declude Virus Pro is suddenly not able to find the
report file.  Nothing has changed from earlier this morning till now.  The
last F-Prot update was yesterday afternoon and Declude has not been updated
today.  Any ideas why Declude might be having this problem?

This one was detected by both scanners and Declude was able to find the
report file:
===
07/16/2003 04:13:29 Q3358a1be0040c3f6 Scanner 1: Virus= W32/[EMAIL PROTECTED]
Attachment=setup.exe [9] I
07/16/2003 04:13:30 Q3358a1be0040c3f6 Scanner 2: Virus= the W32/[EMAIL PROTECTED]
virus !!! Attachment=setup.exe [9] I
07/16/2003 04:13:30 Q3358a1be0040c3f6 File(s) are INFECTED [ W32/[EMAIL PROTECTED]:
13]
07/16/2003 04:13:30 Q3358a1be0040c3f6 Scanned: CONTAINS A VIRUS [Prescan
OK][MIME: 4 115376]
07/16/2003 04:13:30 Q3358a1be0040c3f6 From: [Forged] To:
[EMAIL PROTECTED] [incoming from 204.189.38.4]
07/16/2003 04:13:30 Q3358a1be0040c3f6 Subject: W32.Klez.E removal tools

First failure:
===
07/16/2003 11:10:41 Q95219cd50150bc24 Outlook 'MIME Header' Vulnerability:
type=audio/x-midi, name=CLASS.exe.
07/16/2003 11:10:52 Q95219cd50150bc24 Could not find report file
M:\IMail\spool\D95219cd50150bc24.vir\report.txt.
07/16/2003 11:10:54 Q95219cd50150bc24 Scanner 2: Virus= the W32/[EMAIL PROTECTED]
virus !!! Attachment=CLASS.exe [9] I
07/16/2003 11:10:54 Q95219cd50150bc24 File(s) are INFECTED [ the
W32/[EMAIL PROTECTED] virus !!!: 13]
07/16/2003 11:10:54 Q95219cd50150bc24 Scanned: CONTAINS A VIRUS [Prescan
OK][MIME: 4 98118]
07/16/2003 11:10:54 Q95219cd50150bc24 From: [Forged] To: [EMAIL PROTECTED]
[incoming from 204.189.38.3]
07/16/2003 11:10:54 Q95219cd50150bc24 Subject: HYDRANGEA DUET

Second failure:
===
07/16/2003 13:04:00 Qafa67c3b013a53eb Could not find report file
M:\IMail\spool\Dafa67c3b013a53eb.vir\report.txt.
07/16/2003 13:04:00 Qafa67c3b013a53eb Error 1 in virus scanner 0.
07/16/2003 13:04:01 Qafa67c3b013a53eb Scanner 2: Virus= the W32/[EMAIL PROTECTED]
virus !!! Attachment=VALIGN.scr [9] I
07/16/2003 13:04:01 Qafa67c3b013a53eb File(s) are INFECTED [ the
W32/[EMAIL PROTECTED] virus !!!: 13]
07/16/2003 13:04:01 Qafa67c3b013a53eb Scanned: CONTAINS A VIRUS [Prescan
OK][MIME: 4 104684]
07/16/2003 13:04:01 Qafa67c3b013a53eb From: [Forged] To:
[EMAIL PROTECTED] [incoming from 204.189.38.3]
07/16/2003 13:04:01 Qafa67c3b013a53eb Subject: Worm Klez.E immunity
===

Logging is currently set to MID.  I can set it to DEBUG if requested.

Thanks for any feedback!

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] F-prot updater not updating

2003-07-16 Thread adrian.wells
Yes seen this in the past.

Have you tried changing your download times?

We use the main site to update from, rather than a mirror because we
couldn't log on to any of the mirrors, anyone else had this problem?




We're seeing major slowness is downloading f-prot updates.  So slow it times
out.

Anybody else seeing this? Or, uh oh, is it me?

However, we're seeing this on machines on two completely different networks,
so I am puzzled.

Traceroutes to f-prot.com look fine (for packets going to Scandanavia).



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.