[Declude.Virus] F-Prot Question
What's the command I can add to /virlist to write the list of viruses protected against to a file? -Bill This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: RE: [Declude.Virus] Virus Log File Analyzer
Would it be possible to make it so multiple files could be selected using Ctrl or Shift instead of having to select them individually? This would save some time if I wanted to look at an entire month's worth of log files. Just a suggestion, other than that, it's a great tool! -Bill -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, November 28, 2001 1:17 PM To: [EMAIL PROTECTED] Subject: DSN:RE: [Declude.Virus] Virus Log File Analyzer I understand the concern for the setup saying it is replacing files. The question is how well do you trust Microsoft. :) This part of the Microsoft's set-up routine getting all related files current for the release of VB this was compiled under and is not part of the VB program itself. The was complied under VB6 on NT4. Because of the questions we have installed this on several tech workstations all received the updating files message and are all operating as they should. I have the same version of VB as my tech and it to asked me to replace files (MS patches through roll outs installed). I let it do this and all is fine. I make this statement not as an indication there might not be a problem, just that on several systems it has not created a problem. Standard disclaimer :) This particular program was written by me it was written by one of my technical people so we could see how the virus software was doing. It was put out there strictly as a help for those that may need it and wish to try it. I have used some of the utilities provided by others. This is just a way of saying thanks. Yes it can be run from a workstation. There are no hidden switches. All that is required that the workstation have access to the logflies whether they are on the mail server or copied elsewhere. This does not have to be run on a server. We have run it NT 4 workstations as no 98 systems have the correct access though we have test installed it on 98. The first box will provide a directory listing where you can select the location of the logfile(s). Multiple files can be selected by selecting more than one file separately. The clear button clears these entries. The second box allows you to set the filename and location of the result txt file. The VIEW button will attempt to display the created result file with notepad. The Result can be sorted buy virus name or the number caught. For those that may have VB I have put the program exe up without the Microsoft set-up. It is possible this may run on systems with VB runtime files already installed for some other program. http://www.csonline.net/imailstuff/VirusLogAnalyzer11.exe On systems where we had VB installed it has run fine not needing the install. When we ran the installer on these systems they were told the needed to update also. I hope this answers some questions. I wish I could say exactly what the Microsoft installer was doing. I will see what we can find out. I understand those concerned about using the program for "hacker" reasons and no offence is taken. I will work on the source (GPL) request this more of a red tape issue than any secrets. The program simply reads the log file line by line. When it encounters a line with the "Virus=:" 11/04/2001 00:00:32 Qcb650de Virus=: W95/Hybris.worm.B Attachment=midgets.scr [0] It counts the virus and records the name. Stu System Administrator CSOnline At 10:46 AM 11/28/2001 -0500, you wrote: >Thanks for sharing Stu. > >A few questions. Who programmed this? If you did, would you consider GPL >or releasing it as open source? > >Is there documentation and/or a license? >Are there command-line switches? > >Please don't be offended by my inquiry. If this is something that you wrote >yourself and are just being helpful to the Imail/declude community by >sharing, it is greatly appreciated; however, considering what has happened >in the last couple years regarding exploits and cracker activity, trust is >very important these days. > >It's just that I do not know where this program came from and the installer >worries me. On a currently patched and maintained system it reports that >system files are out-of-date and wants to overwrite files. I would never >install a program that wishes to overwrite system files and has no help >files, software license, contact/support info, etc. > >If you don't have the time or interest in documenting and licensing your >software, can you share the logic that you are using to parse the logs with >from your source code? > >Best regards, >Jeff > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] >Sent: Tuesday, November 27, 2001 4:42 PM >To: [EMAIL PROTECTED] >Subject: [Declude.Virus] DSN:Virus Log File Analyzer > > >A quick and dirty Virus Log Analyzer is available at >http://www.csonline.net/imailstuff/Virusanalyzer.zip > >You can select single or multiple the log files and can select the location >for the summary
[Declude.Virus] Magistr
Has anyone else received W32/Magistr.28672@mm recently? Declude/F-Prot catches it just fine but it appears as though it sends itself from a different mail server than the one the infected user has (should have?) configured. A couple of messages IMail received with this came from gull.mail.pas.earthlink.net, while another came from albatross.prod.itd.earthlink.net, and one received today was from robin.mail.pas.earthlink.net, all of which are valid Earthstink hosts. I'm fairly certain the user(s) that sent the message doesn't use Earthstink as their mail is hosted by Hi-Speed Hosting, an ISP in Hoboken, NJ. Also, a couple of the return messages that Declude sends to the sender, sender.eml, are being returned to my postmaster due to the user not being valid on the mail server. While I know it's simple to do in Outlook does this worm actually spoof the return address? -Bill This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: Re[2]: [Declude.Virus] MY Party
>Can you tell me what they do? It's specific to the scanner you're using. The following is from the command.txt file from F-Prot The program uses the following exit codes, which can be checked with the ERRORLEVEL command from a BAT file. 0 - Normal exit - nothing found 1 - Abnormal termination - unrecoverable error. This can mean any of the following: Internal error in the program. DOS version prior to 3.0 was used. ENGLISH.TX0, SIGN.DEF or MACRO.DEF corrupted or not present. 2 - Selftest failed - program has been modified. 3 - A Boot/File virus infection found. 4 - Virus found in memory. 5 - Program terminated with ^C or ESC. 6 - A virus was removed. This code is only meaningful if the program is used to scan just a single file. 7 - Insufficient memory to run the program. 8 - At least one suspicious file was found, but no infections. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] OT: McAfee/Trend
Sophos (www.sophos.com) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Setzer Sent: Wednesday, March 06, 2002 2:01 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] OT: McAfee/Trend > It seems that they really don't like to sell the server versions of > VirusScan; it's very hard to find online. It's about $60 per copy, but if > you find it online, there is a 5 copy minimum now. You know, I get a very unfriendly feeling at the McAfee site and I don't want to buy 5 user licenses since we're going to deploy trend to protect all our servers and workstations. Any other recommendations for a 3rd scanner? (Already have F-Prot and going to get Trend). Thanks David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] OT: McAfee/Trend
Responded off-list -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Setzer Sent: Wednesday, March 06, 2002 2:22 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] OT: McAfee/Trend > Sophos (www.sophos.com) Looks pretty good. Not a confusing choice from 18,000 similar sounding products. Where did you buy? I can't find any pricing info on their site or at CNET or at CDW. Thanks David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] OT: McAfee/Trend
NAV doesn't have a command line (on-demand) scanner which Declude requires. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Setzer Sent: Wednesday, March 06, 2002 3:01 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] OT: McAfee/Trend Does anyone use NAV with Declude? I don't hear much talk about it. David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] OT: Imail Support List???
I just re-subscribed for the second time in 2 days. It "took" this time and I'm getting updates. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Tuesday, April 30, 2002 11:16 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] OT: Imail Support List??? Try re-subscribing. There was apparently some kind of glitch/problem/cleaning out the list/etc last week. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ryan Keen Sent: Tuesday, April 30, 2002 8:11 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] OT: Imail Support List??? Sorry for this off topic, but anyone else not getting Imail Support List? mine stopped about 2/3 days ago.. Ry -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 30 Apr 2002 09:11:45 -0400 > >>Could someone please point me to a sample >>version of what the BANnotify.eml looks like? >>I found a link in the docs but it is old and doesn't >>work now. > >You can find it at http://www.declude.com/Release/150/BANnotify.eml . > -Scott > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Version???
Scott, any reason why the /diag switch doesn't show the version anymore? -b --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Version???
$*#@ Just send an e-mail that reaches out and smacks me in the head--I knew that. Thanks...(tail between legs) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, May 01, 2002 11:31 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Version??? >Scott, any reason why the /diag switch doesn't show the version anymore? Yes -- it's now "-diag". -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Notification e-mail
Can I use Bcc: in the .eml notification files? -b --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] SKIPIFVIRUSNAMEHAS
in my recip.eml: SKIPIFVIRUSNAMEHAS Vulnerability in my sender.eml: SKIPIFVIRUSNAMEHAS Klez SKIPIFVIRUSNAMEHAS Vulnerability SKIPIFVIRUSNAMEHAS Magistr in my otherpostmaster.eml: SKIPIFVIRUSNAMEHAS Klez SKIPIFVIRUSNAMEHAS Vulnerability -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler Sent: Friday, May 17, 2002 11:01 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] SKIPIFVIRUSNAMEHAS Just out of curiosity, what viruses are everyone blocking with the SKIPIFVIRUSNAMEHAS to sender and recipient? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! "Whenever you find yourself on the side of the majority, it's time to pause and reflect." Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] New Version of F-Prot?
The pub directory at the FTP site I use (ftp.f-prot.com) still has the DOS version at 12. It appears as though only the Win version is at 12a. -b -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dustin Freeman Sent: Tuesday, May 28, 2002 8:35 AM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.Virus] New Version of F-Prot? F-Prot web site says dos still at 3.12is this correct or has the .zip been updated and just not the download web page? -Original Message- From: Jim Jones, Jr. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 28, 2002 7:59 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] New Version of F-Prot? is this new version also for dos? any problems with declude? thanks, Jim - Original Message - From: "David Dodell" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, May 27, 2002 2:17 PM Subject: [Declude.Virus] New Version of F-Prot? > This was on the Frisk web site, dated today May 27th: > > F-Prot AntivirusT version 3.12a > > A new version of F-Prot AntivirusT for Windows, version 3.12a, has > been released and is now ready for download. > > This new version has been improved from previous version 3.12 but the > most notable change lies in greater scanning speed. > > The F-Prot AntivirusT helpfile has been made more extensive version in > 3.12a and more detailed insturctions added. > > F-Prot AntivirusT has in addition been improved in many ways that are > not as clearly visible to the user as these, but will make the use of > F-Prot AntivirusT simpler and even more effective than before > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] W32/Frethem-Fam
>FYI, there is a new virus out, that Sophos has alerted us to I received the same Sophos alert this morning. I just ran Spam Review and selected the Virus option and what do you know, one of these was there waiting for me--it was actually sent to my e-mail address. But thanks to Declude's BANEXT option, it was held due to the attached exe. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Scanner other then McAfee
>What about Sophos? I spoke to a Sophos rep a few months ago, and they too are aware of IMail and Declude, and also were charging per mailbox just like McAfee. -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] banned files
>recommended file extensions to ban http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx This is the listing of files that are banned by the e-mail security update for Outlook -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Test, Please Ignore
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] fprot 3.12b and Declude?
Along the same lines, it looks as though they've finally made the DOS version on 3.12b available. -Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Outlook Express Flaw Permits System Takeover Via E-mail
>those clients that don't keep their systems up to date. Wait, you mean there are people who don't keep up to date with patches? -Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] .DOC identified as .EXE
For what it's worth, this happened here today too: 11/27/2002 12:19:11 Qfe8d396 MIME file: [text/html][7bit; Length=6927 Checksum=581128] 11/27/2002 12:19:11 Qfe8d396 Found file with mismatched extensions [Nov-Dec-Ja-Nov-Dec-Ja]; assuming .exe 11/27/2002 12:19:11 Qfe8d396 Got disp name=Nov-Dec-Jan LivingWell-DivorceCare-LifeGroup EventsUpdate 1.0.doc [MimeName=mismatched.exe]. 11/27/2002 12:19:11 Qfe8d396 MIME file: mismatched.exe [base64; Length=30720 Checksum=1108904] 11/27/2002 12:19:11 Qfe8d396 Banning file with exe extension [application/msword]. 11/27/2002 12:19:11 Qfe8d396 Scanned: Banned file extension. [MIME: 2 37769] -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] F-Prot 3.12c
>Not yet, but I've only had it running for a half hour or so. You might want to check the version. I downloaded it 3 times, from both links (Europe and USA) on their site and from the pub directory on ftp.f-prot.com, and when I run it, it still says 3.12b. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: . U R L Attachments
I find it funny that Microsoft recommends blocking attachments with . u r l extensions per their unsafe attachment list in KB 291369 (http://support.microsoft.com/default.aspx?scid=KB;en-us;291369&;), yet their software (IE, Outlook, Outlook Express) automatically creates an attachment with this extension when you attempt to send a link via e-mail. I'm debating on removing this from BANEXT as quite a bit of legit mail is being held. Anyone have any thoughts on this? Bill Beach Network Administrator Wenger's Feed Mill, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] OT: . U R L Attachments
>outlook will strip it which should be fine as long as the URL itself makes it into the body of the message Bill Beach --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
