re: [Declude.Virus] Ping
pong From: "David Barker" [EMAIL PROTECTED]Sent: Friday, August 11, 2006 10:46 AMTo: declude.virus@declude.com, declude.junkmail@declude.comSubject: [Declude.Virus] Ping Ping---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
RE: [Declude.Virus] Upcoming Declude Release
Any status on the new release? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, July 26, 2006 8:10 AM To: declude.junkmail@declude.com; declude.virus@declude.com Subject: [Declude.Virus] Upcoming Declude Release This is just an FYI. Our next release is scheduled for 2 Aug and we are aiming to add the following fixes for 4.3.x: Fix - Hijack - HOLD/DELETE to prevent spam items going to \Spool Fix - Failed .hdr to be DELETED rather than move to the \error directory Fix - COPYFILE not working correctly Fix - Add x-header for CT RefID Fix - Buffer Overflow fix In conjunction with this we will release a 3.1.x with several of the fixes already added to 4.x David Barker Product Manager Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 4.2 build 20 Released 6 July 2006
I see fixes to code that should also exist in v3.1. Have you abandoned development on v3.x? Evans Martin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, July 07, 2006 9:42 AM To: Declude.Virus@declude.com; Declude.JunkMail@declude.com Subject: [Declude.Virus] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SMFIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 4.2 build 20 Released 6 July 2006
Doh. Please disregard my last post. I thought I was reading the junkmail list at first. Mistake acknowledged ... what is the plan for v3? Evans Martin --- EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net/ PROGRAMMING: http://www.martekware.com/ iPlus Info Browser - http://www.martek.net/Default.aspx?tabid=96 iPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. iPB for SmarterMail coming soon! Send questions to [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, July 07, 2006 9:42 AM To: Declude.Virus@declude.com; Declude.JunkMail@declude.com Subject: [Declude.Virus] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SMFIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus]
I got the same thing running 3.0.22. Evans Martin --- EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMNG: http://www.martekware.com iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Saturday, February 18, 2006 4:30 PM Subject: [Declude.Virus] Organization:Cypress Integrated Systems, Inc. X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: Bill Green dfn Systems Declude.Virus@declude.com Subject: Re[2]: [Declude.Virus] ClamAV Footer ... In-Reply-To: [EMAIL PROTECTED] References: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sandy is Sanford Whiteman. He is a regular, knowlegeable, and very appreciated contributor to this list. Hey, thanks, man! That's nice of you to say. The download location for FOOTER32 is www.imprimia.com/products/software/freeutils/footer32/download/release As Matt noted, it's true that there's no space for dynamic content per se. _Periodically_ updated content like the virus signatures could be written out pretty easily to the .TXT files that FOOTER32 uses as input; you could either have this triggered when an update comes in, maybe by parsing a notification e-mail that you get for every update or something like that. . . or, even easier, by running a batch file every hour or so that checks the signature date/version and writes this out to new .TXT files. However, _totally_ dynamic content like the incoming timestamp of each message could not be accomplished. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] ? Name Voting Time
I agree with everything except the final outcome. I think SUITE should be the winning choice. Declude Suite X with the x being the current version. This would differentiate this product from the individual declude products and should have the same version that the individual products have at the moment. Evans Martin --- EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Imail Admin Sent: Wednesday, February 15, 2006 6:12 PM To: [EMAIL PROTECTED] Cc: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: Fw: [Declude.Virus] ? Name Voting Time First, I vote AGAINST anything with 4 in it. Why 4? You were calling it version 4, but that's a complete misnomer. Currently, it represents the same feature set as the so-called version 3, so there is no reason to call it version 4. In addition, there are three components in it (AVA, JM, HJ), so again there is nothing to indicate four. Am I missing something here? It seems that any name with four in it or indicating a four (such as the cute Quattro) is actually misleading. That's as bad as your current process of naming it version 4. By process of elimination: 1. Quattro is not only inappropriate but a rip-off of the old Borland name. And it leaves no room for future changes to the suite. 2. DEC4 is a waste, but DEC alone is redundant from Declude, not to mention confusing with Digital Equipment. So that's out. 3. Suite4 can be salvaged by shortening to Suite. This is completely unoriginal, but at least it's honest and clear, leaving no room for doubt. 4. R/4 is another rip-off, and really doesn't explain the collective nature of the different products. 5. Total is probably best, because it is just as clear as Suite but a little more original. And it doesn't have a stupid 4 in it. 6. Power Suite4. Again, let's dump the 4. Is Power Suite really any better than just Suite? Only to marketing types who live on tropical islands and worship Donald Trump. 7. Max4 is another rip-off, and it doesn't explain the collective nature of the combined products. 8. ForePlay sounds good to me. What's your problem? 9. ES4 can be shortened to ES, but that's really just another wordplay on Suite and Power Suite. You guys are kind of in a rut, huh? Sounds like #5 is best, since your Puritan hearts won't let you pick #8. Personally, I think you need to start the contest over and get some new names altogether. Is this really all the names you received? Heck, I could think up better names than this... wait, I did send in some names, and none of them made the list. So you guys filtered the choices before presenting for a vote? I thought you already admitted you don't know how to name products? So why would you try to list only your favorites. Time to go back to #8 (wish I had thought of that one, even though it does have a stupid 4 in it). Ben BC Web - Original Message - From: Barry Simpson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Sent: Wednesday, February 15, 2006 2:39 PM Subject: [Declude.Virus] ? Name Voting Time Here are the choices: Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time Friday 17th February. - Declude Quattro - DEC4 - Suite4 - R/4 (release four) - Declude Total - Declude Power Suite 4 - Declude Max4 - Declude ForePlay just making sure you're paying attention) - Declude-ES4 (E-mail security 4) Thanks Barry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can
RE: [Declude.Virus] My quick and dirty virus stats
I would love to use your perl script. This is pretty cool. Nice stats to know. Thanks, Evans Martin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Friday, January 27, 2006 2:21 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] My quick and dirty virus stats I use PERL for most of this stuff. Easy enough to learn, or I could send you the script off-line. Karl Drugge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Imail Sent: Friday, January 27, 2006 2:37 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] My quick and dirty virus stats Andrew, What are you using to compile these numbers? Mark At 12:48 PM 1/27/2006, you wrote: Just because it's easy to produce... This is from the viruses that get caught as spam from Dec 01 2005 through yesterday: 13 Suspicious program in Archive 1 Suspicious program 5 Unknown Virus 57 W32/Bagle 1 W32/Banker 13 W32/Brepibot 28 W32/Kapser 33 W32/Klez 108 W32/Mitglieder 13 W32/Mydoom 665 W32/Mytob 1,124 W32/Netsky 5,607 W32/Sober 1 W32/Torvil 5 W32/Zafi Andrew 8) No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.1.375 / Virus Database: 267.14.23/243 - Release Date: 1/27/2006 -- PLEASE NOTE : Florida has a very broad public records law. Most written communications to or from City officials regarding City business are public records available to the public and media upon request. Your E-mail communications may be subject to public disclosure. PLEASE NOTE : Florida has a very broad public records law. Most written communications to or from City officials regarding City business are public records available to the public and media upon request. Your E-mail communications may be subject to public disclosure.
RE: [Declude.Virus] f-prot update script
Same here. Wget rocks. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Wednesday, May 04, 2005 10:27 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] f-prot update script My wget script for updating F-Prot has been working just fine for a few years now, and still continues to function properly. Bill - Original Message - From: Douglas Cohn [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Wednesday, May 04, 2005 8:13 AM Subject: RE: [Declude.Virus] f-prot update script This update is the worst method IMO (The one referenced in the link here). I used to update every hour and using this I would find the machine with the updater hung on the screen timed out at least once a week. W2K Server SP4. What OS are you using it on where it does NOT create issues? I started writing a simple updater using 4NT copy /u which copies across anonymous ftp and http links and only copies new files. Perfect but then I read somewhere that fprot has no FTP updates available anymore so I rewrote the one for Mcafee command line instead since I do not have the full version installed on this machine and do not want to install the full version. The script pulls the superdat expands it and then the daily dat. I could not get the wget Mcafee script from the Declude links to work for long either. Wget got corrupted after 2 days saying it was not a valid win32 application. Those links on the Declude site should be removed as that stuff does not work anymore. 4NT from Jpsoft is simply the best tool for the job anyway. That and unzip from infozip and it is done. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Monday, May 02, 2005 11:21 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] f-prot update script Daniel, Give this a try: http://www.f-prot.com/support/windows/fpwin_faq/88.html -Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Ivey Sent: Monday, May 02, 2005 11:06 AM To: 'Declude.Virus@declude.com' Subject: RE: [Declude.Virus] f-prot update script I have tried using this script. I keep getting an error referring to wget.exe and it doesn't update F-Prot. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: Goran Jovanovic [mailto:[EMAIL PROTECTED] Sent: Monday, May 02, 2005 11:02 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] f-prot update script Take a look at: http://www.declude.com/Articles.asp?ID=100 F-Prot for DOS updater - A batch file that automatically updates F-Prot and its virus definitions (old version here), and a Cygwin version, and a complete .ZIPed version. Finally, a Simple version! Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Daniel Ivey Sent: Monday, May 02, 2005 9:52 AM To: 'Declude.Virus@declude.com' Subject: [Declude.Virus] f-prot update script Does anyone have an f-prot update script that they wouldn't mind sharing? I have tried one that I found, but never could get it to work. Any help is appreciated. Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from
RE: [Declude.Virus] Server Virus Scanners
I use ClamAV for Windows on my NT/2000 servers. Seems to work great. Auto updated itself and best of all ... it's free! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Friday, November 12, 2004 7:28 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Server Virus Scanners I am about to setup a new server and I was previously using Trend Micro's Server Protect on my other servers. I was wondering what others were using for their on-demand scanner. I'm already using F-Prot for my command line scanner with Declude, but I also need to have a server class scanner for uploaded files. This box is a web server and my clients upload word and excel files to the system. I want to be able to scan those immediately. The reason I ask about a different scanner than Trend is that my service agreement with them has expired and their marketing practices is forcing me to buy a whole new product instead of using my existing copy. So, I wanted to explore some other options before succumbing. Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Sending Email to All users
Try IPB. It will make your lists for you. http://www.martekware.com/products.html Thanks, Evans Martin -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Thursday, July 22, 2004 11:08 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Sending Email to All users I am wanting to send an email to all my users on a certain domain. I am running Imail 8.05 with Declude Junkmail Pro and Virus Pro. With previous versions I use to use the makelist utility to extract the users out and create a list, but that doesn't work now. If I use the mailall.exe won't that create an issue using Declude virus? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
