RE: [Declude.Virus] containing the Unknown Virus
10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were deleted; assuming external virus scanner found a virus 10/20/2003 16:20:16 Q437f01e800a28cd0 File(s) are INFECTED [13] 10/20/2003 16:20:16 Q437f01e800a28cd0 Scanned: CONTAINS A VIRUS [MIME: 2591] That's because you are still using the ONACCESS ON setting. If you use the ONACCESS ON setting and have a virus scanner that doesn't save all the files that it should or deletes files that it should not, this will happen. That's one of several reasons why we strongly recommend against using the ONACCESS ON setting. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
> >10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were > >deleted; assuming external virus scanner found a virus 10/20/2003 > That's because you are still using the ONACCESS ON setting. If you use the > ONACCESS ON setting and have a virus scanner that doesn't save all the > files that it should or deletes files that it should not, this will > happen. That's one of several reasons why we strongly recommend against > using the ONACCESS ON setting. ONACCESS is set to off and the test virus comes in to the inbox. Did that log file entry appear *after* you switched to "ONACCESS OFF"? If so, there is a major bug in Declude Virus. What should my CFG file look like if I am using F-Prot It should look like the sample in the manual. :) Most important are to use "ONACCESS OFF", and to have at least one SCANFILE, VIRUSCODE, and REPORT line. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
ONACCESS is set to off and the test virus comes in to the inbox. What should my CFG file look like if I am using F-Prot Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, October 20, 2003 4:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus >10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were >deleted; assuming external virus scanner found a virus 10/20/2003 >16:20:16 Q437f01e800a28cd0 File(s) are INFECTED [13] 10/20/2003 >16:20:16 Q437f01e800a28cd0 Scanned: CONTAINS A VIRUS [MIME: 2591] That's because you are still using the ONACCESS ON setting. If you use the ONACCESS ON setting and have a virus scanner that doesn't save all the files that it should or deletes files that it should not, this will happen. That's one of several reasons why we strongly recommend against using the ONACCESS ON setting. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Hello Scott, We have resolved the issue. When we did the F-Prot version upgrade, it must of corrupted during the install. We totally removed F-Prot and re-installed it, and the issue has been fixed. Thanks for help. -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, October 20, 2003 5:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus > > >10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files > > >were deleted; assuming external virus scanner found a virus > > >10/20/2003 > > That's because you are still using the ONACCESS ON setting. If you > > use > the > > ONACCESS ON setting and have a virus scanner that doesn't save all > > the files that it should or deletes files that it should not, this > > will happen. That's one of several reasons why we strongly > > recommend against using the ONACCESS ON setting. >ONACCESS is set to off and the test virus comes in to the inbox. Did that log file entry appear *after* you switched to "ONACCESS OFF"? If so, there is a major bug in Declude Virus. >What should my CFG file look like if I am using F-Prot It should look like the sample in the manual. :) Most important are to use "ONACCESS OFF", and to have at least one SCANFILE, VIRUSCODE, and REPORT line. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] How to resend emails in the /spool/virus directory
We had some issues with our Virus software today and it was placing every email into the /spool/virus directory. How do we resend those emails? Thanks, ___ Christopher A. Melo --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] How to resend emails in the /spool/virus directory
We had some issues with our Virus software today and it was placing every email into the /spool/virus directory. How do we resend those emails? You can just copy them (both the D*.SMD and matching Q*.SMD files) back to the \IMail\spool directory. To send them out quickly, you can then go to IMail Administrator, choose "View Queue", and click the "Send All" button about 20 times. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
