Re: [Declude.Virus] .CPL file blocked
Here is Mcafee's response to the .CPL I have been receiving - Don A.V.E.R.T. Sample Analysis Issue Number: 677272 Virus Research Analyst - Hong Kong: V. Nguyen Identified: W32/[EMAIL PROTECTED] AVERT(tm) Labs, Hong Kong Thank you for submitting your suspicious file. Synopsis - - Original Message - From: "Scott Fisher" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 26, 2004 12:52 PM Subject: [Declude.Virus] .CPL file blocked Could be something new going on: I've just blocked my first CPL file at 12:15 today. .CPL is a Windows Control Pane lapplet extension. This was undected by F-Prot, McAfee and AVG. It has the ever-suspicious name of details.cpl Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] unknown virus in unknown file
Hi, As Declude *does* know the name of the file it is trying to decode, maybe it could display that name, along with the fact it caught a vulnerability and not an unknow virus? Shouldn't it have reported it found: The "EOF in multipart processing" vulnerability virus in Webmaster_attach.pif I'm also banning PIF files but vulnerabilities should take precedent over banned extentions in reporting, right? Here the log snippet from the declude log: 04/26/2004 20:44:16 Q588000ad02465470 MIME file: [message/delivery-status][*DEFAULT*; Length=321 Checksum=28335] 04/26/2004 20:44:16 Q588000ad02465470 Warning: EOF in middle of MIME segment [Webmaster_attach.pif] [--dcffafbdbccebfccbeec] 04/26/2004 20:44:16 Q588000ad02465470 Banning file with pif extension [application/octet-stream]. 04/26/2004 20:44:16 Q588000ad02465470 WARNING: EOF in multipart processing. 04/26/2004 20:44:16 Q588000ad02465470 WARNING: EOF in multipart processing. 04/26/2004 20:44:17 Q588000ad02465470 Invalid PIF Vulnerability 04/26/2004 20:44:17 Q588000ad02465470 Found a bogus .pif file 04/26/2004 20:44:17 Q588000ad02465470 File(s) are INFECTED [: 0] 04/26/2004 20:44:17 Q588000ad02465470 Scanned: CONTAINS A VIRUS [MIME: 4 37310] 04/26/2004 20:44:17 Q588000ad02465470 From: <> To: [EMAIL PROTECTED] [incoming from 192.87.5.144] 04/26/2004 20:44:17 Q588000ad02465470 Subject: Undelivered Mail Returned to Sender Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? - Original Message - From: "Postmaster" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 26, 2004 8:44 PM Subject: Declude Virus caught a virus > Declude Virus v1.79i4 caught the Unknown Virus virus in Unknown File > from <> to: [EMAIL PROTECTED] > > Date: 04/26/2004 20:44:17 > Subject:Undelivered Mail Returned to Sender > Spool File: D588000ad02465470.SMD > Remote IP: 192.87.5.144 > > Headers: > Received: from relay.surfnet.nl [192.87.5.144] by tio.nl with ESMTP > (SMTPD32-8.05) id A880AD0246; Mon, 26 Apr 2004 20:44:16 +0200 > Received: by relay.surfnet.nl (Postfix) > id C0C453F4EE; Mon, 26 Apr 2004 20:43:04 +0200 (MEST) > Date: Mon, 26 Apr 2004 20:43:04 +0200 (MEST) > From: [EMAIL PROTECTED] (Mail Delivery System) > Subject: Undelivered Mail Returned to Sender > To: [EMAIL PROTECTED] > MIME-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="81D6A3F2C9.1083004984/relay.surfnet.nl" > Message-Id: <[EMAIL PROTECTED]> > > > --- > [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] > > --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] unknown virus in unknown file
As Declude *does* know the name of the file it is trying to decode, maybe it could display that name, along with the fact it caught a vulnerability and not an unknow virus? It does display the actual name. Shouldn't it have reported it found: The "EOF in multipart processing" vulnerability virus in Webmaster_attach.pif No. That isn't a vulnerability -- that is just a harmless flaw with the E-mail. The issue here is with the latest interim release, and has since been fixed. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Bound to happen
How do we get to the manuals for DecludeSPAM and DecludeAntiVirus? The new web site does not make it easy. Nor did the old one. :) You can find them at http://www.declude.com/virus/manual.htm (Declude Virus) and http://www.declude.com/junkmail/manual.htm (Declude JunkMail). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Bound to happen
How do we get to the manuals for DecludeSPAM and DecludeAntiVirus? The new web site does not make it easy. Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, April 26, 2004 11:55 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Bound to happen >I just got a copy of the inevitable: >An e-mail with the zip password placed in an image. Two files attached, >the first file was a gif but the zip file was empty and not actually >encrypted so it made it to my desktop mail client since it apparently >wasn't a viable infected file. > >I assume this would have been stopped if BANEXT EZIP was used and it >WAS actually encrypted? That is correct. Since the .ZIP file was empty, it sounds like the virus was either removed by the previous SMTP server, or the virus didn't send itself correctly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] .CPL file blocked
I submitted one of these to Mcafee. I am seeing a lot more of these than the new Bagle. Don - Original Message - From: "Scott Fisher" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 26, 2004 12:52 PM Subject: [Declude.Virus] .CPL file blocked Could be something new going on: I've just blocked my first CPL file at 12:15 today. .CPL is a Windows Control Pane lapplet extension. This was undected by F-Prot, McAfee and AVG. It has the ever-suspicious name of details.cpl Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] .CPL file blocked
Could be something new going on: I've just blocked my first CPL file at 12:15 today. .CPL is a Windows Control Pane lapplet extension. This was undected by F-Prot, McAfee and AVG. It has the ever-suspicious name of details.cpl Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Bound to happen
I just got a copy of the inevitable: An e-mail with the zip password placed in an image. Two files attached, the first file was a gif but the zip file was empty and not actually encrypted so it made it to my desktop mail client since it apparently wasn't a viable infected file. I assume this would have been stopped if BANEXT EZIP was used and it WAS actually encrypted? That is correct. Since the .ZIP file was empty, it sounds like the virus was either removed by the previous SMTP server, or the virus didn't send itself correctly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Bound to happen
I just got a copy of the inevitable: An e-mail with the zip password placed in an image. Two files attached, the first file was a gif but the zip file was empty and not actually encrypted so it made it to my desktop mail client since it apparently wasn't a viable infected file. I assume this would have been stopped if BANEXT EZIP was used and it WAS actually encrypted? John Olden - Systems Administrator Champaign Park District --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
We use F-secure Anti-Virus Client Security along with F-Secure Policy Manger. Centralized updates are automatic and alerts are sent to PM admin. F-Secure Anti-Virus actually uses 3 scanning engines, one of which is F-Prot. Dan On 4/26/2004 10:27 AM, Jared Pickerell wrote: We use Symantec Antivirus Corporate Edition. It has worked great for us. The corporate edition has no activation. I believe it is much better suited for the business world than NAV 2004. You set up a SAV server that controls the SAV client settings. (very nice central configuration and management) Also, only the server has to download the updates, which automatically pushes out the defs to the clients. I have schedule the server to updated defs every couple of hours every day. You get updates this way that you do not get by doing a LiveUpdate. I have been very happy with it. Jared Pickerell Co-Director/Network Admin Highland Community College 606 W Main, Highland, KS 66035 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Monday, April 26, 2004 10:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion Does NAV 2k4 have the product activation as well? The reason I ask is that I did have Norton Internet Security (NIS) 2k4 installed on my work laptop. Well, since it's a work laptop, I install, de-install programs most of the time and as a result, every month or two, I backup and re-ghost the HDD from an image. Just this weekend when I tried to activate the NIS I installed, I got the "Activated too many times" error. UGH! I'm awaiting a response from Symantec and was just asking about other alternatives for the anti-virus side of things. Looking at Zonelabs Zonealarm for the software Firewall replacement.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Fritts Sent: Monday, April 26, 2004 10:59 AM To: Jeff Maze - Hostmaster Subject: Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion McAfee, Norton, or others? Which do you think provides the quickest update I used Norton for a long time on Windows 2k but when I moved to XP I also upgraded to Norton 2004. It seemed much more complex to me with a bunch more services (maybe my imagination). Regardless, I had constant problems with it and no help from Symantec. Main problem was that after a reboot the AV could not start. Usually a 2nd reboot would fix but sometimes not. Also, my XP machine would sometimes just reboot itself for no apparent reason and I always "felt" it had something to do with Norton. Don't know that - could just be XP. Finally removed it and switched to McAfee on one workstation. So far I think I like it better and no problems on it starting and no reboots. Only thing I do complain about it with McAfee is the download process forces use of Internet Explorer and the scanning configuration program needs more granularity. On my XP notebook I'm using Kaspersky - it's kind of fun actually - screams if it finds something - a little too aggressive on non-virus vulnerabilities but probably something I can adjust out. All seem to me about equally effective over time. Also using Fprot and ClamAV and have extremely good results with both. Really with cost consideration Fprot has to be one of my favorites. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. [AUTOMATED NOTE: Your mail server [198.248.79.209] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. begin:vcard fn:Dan Star n:Star;Dan org:Engman-Taylor Co. adr:;;W142 N9351 Fountain Blvd;Menomonee Falls;WI;53051;USA email;internet:[EMAIL PROTECTED] title:Manager of Market Analysis tel;work:262-946-0322 tel;cell:262-853-9564 x-mozilla-html:TRUE version:2.1 end:vcard
RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
We use Symantec Antivirus Corporate Edition. It has worked great for us. The corporate edition has no activation. I believe it is much better suited for the business world than NAV 2004. You set up a SAV server that controls the SAV client settings. (very nice central configuration and management) Also, only the server has to download the updates, which automatically pushes out the defs to the clients. I have schedule the server to updated defs every couple of hours every day. You get updates this way that you do not get by doing a LiveUpdate. I have been very happy with it. Jared Pickerell Co-Director/Network Admin Highland Community College 606 W Main, Highland, KS 66035 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Monday, April 26, 2004 10:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion Does NAV 2k4 have the product activation as well? The reason I ask is that I did have Norton Internet Security (NIS) 2k4 installed on my work laptop. Well, since it's a work laptop, I install, de-install programs most of the time and as a result, every month or two, I backup and re-ghost the HDD from an image. Just this weekend when I tried to activate the NIS I installed, I got the "Activated too many times" error. UGH! I'm awaiting a response from Symantec and was just asking about other alternatives for the anti-virus side of things. Looking at Zonelabs Zonealarm for the software Firewall replacement.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Fritts Sent: Monday, April 26, 2004 10:59 AM To: Jeff Maze - Hostmaster Subject: Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion > McAfee, Norton, or others? Which do you think provides the quickest > update I used Norton for a long time on Windows 2k but when I moved to XP I also upgraded to Norton 2004. It seemed much more complex to me with a bunch more services (maybe my imagination). Regardless, I had constant problems with it and no help from Symantec. Main problem was that after a reboot the AV could not start. Usually a 2nd reboot would fix but sometimes not. Also, my XP machine would sometimes just reboot itself for no apparent reason and I always "felt" it had something to do with Norton. Don't know that - could just be XP. Finally removed it and switched to McAfee on one workstation. So far I think I like it better and no problems on it starting and no reboots. Only thing I do complain about it with McAfee is the download process forces use of Internet Explorer and the scanning configuration program needs more granularity. On my XP notebook I'm using Kaspersky - it's kind of fun actually - screams if it finds something - a little too aggressive on non-virus vulnerabilities but probably something I can adjust out. All seem to me about equally effective over time. Also using Fprot and ClamAV and have extremely good results with both. Really with cost consideration Fprot has to be one of my favorites. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. [AUTOMATED NOTE: Your mail server [198.248.79.209] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
Does NAV 2k4 have the product activation as well? The reason I ask is that I did have Norton Internet Security (NIS) 2k4 installed on my work laptop. Well, since it's a work laptop, I install, de-install programs most of the time and as a result, every month or two, I backup and re-ghost the HDD from an image. Just this weekend when I tried to activate the NIS I installed, I got the "Activated too many times" error. UGH! I'm awaiting a response from Symantec and was just asking about other alternatives for the anti-virus side of things. Looking at Zonelabs Zonealarm for the software Firewall replacement.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Fritts Sent: Monday, April 26, 2004 10:59 AM To: Jeff Maze - Hostmaster Subject: Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion > McAfee, Norton, or others? Which do you think provides the quickest > update I used Norton for a long time on Windows 2k but when I moved to XP I also upgraded to Norton 2004. It seemed much more complex to me with a bunch more services (maybe my imagination). Regardless, I had constant problems with it and no help from Symantec. Main problem was that after a reboot the AV could not start. Usually a 2nd reboot would fix but sometimes not. Also, my XP machine would sometimes just reboot itself for no apparent reason and I always "felt" it had something to do with Norton. Don't know that - could just be XP. Finally removed it and switched to McAfee on one workstation. So far I think I like it better and no problems on it starting and no reboots. Only thing I do complain about it with McAfee is the download process forces use of Internet Explorer and the scanning configuration program needs more granularity. On my XP notebook I'm using Kaspersky - it's kind of fun actually - screams if it finds something - a little too aggressive on non-virus vulnerabilities but probably something I can adjust out. All seem to me about equally effective over time. Also using Fprot and ClamAV and have extremely good results with both. Really with cost consideration Fprot has to be one of my favorites. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
I personally use NOD32 on all of my desktops. I have had TrendMicro recommended by a Consultant friend who said he uses it to clean viruses from systems protected by Norton and McAfee all the time. He tells me he has never had to go back and clean a system with TrendMicro on it, but frequently does with the other two. I am not fond of Norton or McAfee, they are too expensive, too resource hungry, and too problem prone. As an ISP, better than half of the email problems customers have can be resolved by restarting the computer or reomving Norton or McAfee when their transparent mail scanning proxy fails to behave. Thanks, Chuck Frolick ArgoLink.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Sunday, April 25, 2004 11:00 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion McAfee, Norton, or others? Which do you think provides the quickest updates and the best support.. Just was curious.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
> McAfee, Norton, or others? Which do you think provides the quickest update I used Norton for a long time on Windows 2k but when I moved to XP I also upgraded to Norton 2004. It seemed much more complex to me with a bunch more services (maybe my imagination). Regardless, I had constant problems with it and no help from Symantec. Main problem was that after a reboot the AV could not start. Usually a 2nd reboot would fix but sometimes not. Also, my XP machine would sometimes just reboot itself for no apparent reason and I always "felt" it had something to do with Norton. Don't know that - could just be XP. Finally removed it and switched to McAfee on one workstation. So far I think I like it better and no problems on it starting and no reboots. Only thing I do complain about it with McAfee is the download process forces use of Internet Explorer and the scanning configuration program needs more granularity. On my XP notebook I'm using Kaspersky - it's kind of fun actually - screams if it finds something - a little too aggressive on non-virus vulnerabilities but probably something I can adjust out. All seem to me about equally effective over time. Also using Fprot and ClamAV and have extremely good results with both. Really with cost consideration Fprot has to be one of my favorites. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
We have also used Norton Corporate for at least 3 - 4 years now with no problems. I remember a few years back when we had a mess in our network (In 1999 fast growing pains) and a dedicated customer installed Norton and we had installed it for our shared. We saw his Norton in the Server MMC Manager screens and he saw ours. What a Nightmare that was. We had a /19 with no subnets. One FLAT Network. Fast but very sloppy and full of nightmares. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Monday, April 26, 2004 12:00 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion McAfee, Norton, or others? Which do you think provides the quickest updates and the best support.. Just was curious.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
I use, sell and recommend Symantec AV Corporate Edition almost exclusively for both client side and regular server side file scanning. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Jeff Maze - Hostmaster > Sent: Sunday, April 25, 2004 9:00 PM > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion > > McAfee, Norton, or others? Which do you think provides the quickest updates > and the best support.. > > Just was curious.. > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion
If you are paranoid, choose a client side filter that you are not using to scan your e-mail. This would give you an added layer of protection. I believe Symantec has Symantec Anti-Virus Corporate Edition that does not include a SMTP scanning gateway, thus significantly lowering the cost. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 04/25/04 11:00PM >>> McAfee, Norton, or others? Which do you think provides the quickest updates and the best support.. Just was curious.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
