[Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad
Please update your address book with my new email address of [EMAIL PROTECTED] This address will continue to work for a while, but I would like everyone to begin using this one instead. Thanks, Grant Griffith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad
Please update your address book with my new email address of [EMAIL PROTECTED] This address will continue to work for a while, but I would like everyone to begin using this one instead. Thanks, Grant Griffith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad
Please update your address book with my new email address of [EMAIL PROTECTED] This address will continue to work for a while, but I would like everyone to begin using this one instead. Thanks, Grant Griffith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad
Please update your address book with my new email address of [EMAIL PROTECTED] This address will continue to work for a while, but I would like everyone to begin using this one instead. Thanks, Grant Griffith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad
Please update your address book with my new email address of [EMAIL PROTECTED] This address will continue to work for a while, but I would like everyone to begin using this one instead. Thanks, Grant Griffith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] New Virus?
It does have a .zip file that contains a .exe file inside it. The message says it contains a .pdf file, but it is really an .exe file. I am running it thru virustotal.com now. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications http://www.etczone.com 812-932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Tuesday, October 10, 2006 1:32 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus? Sounds like a very popular eBay scam, not a virus. Was there actually a hostile application attached? Submit the executable to: http://www.virustotal.com/en/indexf.html Or: http://virusscan.jotti.org/ I believe that both services share unknown executables with the antivirus vendors. Or you directly submit the executable to your preferred antivirus vendor, usually through a web submission form, e.g.: http://subwiz.trendmicro.com/SubWiz/Default.asp Or: http://www.f-prot.com/virusinfo/submission_form.html But the vendor websites are notorious for hoarding information to get a competitive advantage (at the expense of the customers of every other antivirus vendor!). Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Grant Griffith > Sent: Tuesday, October 10, 2006 10:21 AM > To: declude.virus@declude.com > Subject: [Declude.Virus] New Virus? > > Hey All > > Has anyone seen the email saying that you purchased a Sony > VAIO for $2,500? > We received a bunch of these this morning in our mailboxes > and am trying to figure out how they made it thru the > scanners. What is the place to send them to see if it is > begin caught? > > Thanks, > Grant Griffith > Web Application Developer > Enhanced Telecommunications > http://www.etczone.com > 812-932-1000 > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] New Virus?
Hey All Has anyone seen the email saying that you purchased a Sony VAIO for $2,500? We received a bunch of these this morning in our mailboxes and am trying to figure out how they made it thru the scanners. What is the place to send them to see if it is begin caught? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications http://www.etczone.com 812-932-1000 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Kami, Thanks for the info, but this is a separate issue as these have no HTML in them. There is also nothing in the Declude logs for these messages. I am not positive it is Declude, but I have not had an issue since I disabled Declude Virus on Friday afternoon, so it is looking more and more like it could be. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Monday, March 20, 2006 6:45 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Hi Grant.. The problem is an issue we faced with as well. If you are sending HTML with fancy tags your emails are getting tagged as: -Virus: Possibly a new variant of JS/ -In: [HTML segment] We had all of our web messaging emails get caught as that virus. I changed the program to simply send an HTML without any tags other than for line break and it worked fine. We use ASPemail for 1 application and the problem started happening almost 2 or so weeks ago. All is fine now. Hope this helps. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 20, 2006 10:36 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and GGI> then below it is the Imail logs showing it timing out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect GGI> 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO GGI> mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a000043ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Grant GGI> Griffith - IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and then GGI> below it is the Imail logs showing it timing GGI> out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.60] connect 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] HELO mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On GGI> Behalf Of Grant Griffith - GGI> IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> OK, I have logging turned on now for the ASPMail GGI> side of things. Just have GGI> to watch for it to occur again and then look at what both sides said. GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI> Sent: Tuesday, March 14, 2006 10:41 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> You are looking in the wrong direction. This is a GGI> message coming into IMail GGI> not going out to somewhere else. Since it hasn't GGI> been accepted for delivery GGI> by IMail there is nothing to re-queue and try GGI> again.. the question here is GGI> why didn't the conversation continue after the GGI> final RCPT TO. Unfortunately, GGI> we only see one side of the communication, that GGI> being the commands coming GGI> in. At this time I do not know if the sending GGI> server got the final 250 OK GGI> and didn't send the DATA command or what. The GGI> connection timed out while GGI> IMail was waiting for a new command. A sniffer on the line can give more GGI> info and point you to the problem. GGI>
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and then GGI> below it is the Imail logs showing it timing GGI> out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.60] connect 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] HELO mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On GGI> Behalf Of Grant Griffith - GGI> IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> OK, I have logging turned on now for the ASPMail GGI> side of things. Just have GGI> to watch for it to occur again and then look at what both sides said. GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI> Sent: Tuesday, March 14, 2006 10:41 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> You are looking in the wrong direction. This is a GGI> message coming into IMail GGI> not going out to somewhere else. Since it hasn't GGI> been accepted for delivery GGI> by IMail there is nothing to re-queue and try GGI> again.. the question here is GGI> why didn't the conversation continue after the GGI> final RCPT TO. Unfortunately, GGI> we only see one side of the communication, that GGI> being the commands coming GGI> in. At this time I do not know if the sending GGI> server got the final 250 OK GGI> and didn't send the DATA command or what. The GGI> connection timed out while GGI> IMail was waiting for a new command. A sniffer on the line can give more GGI> info and point you to the problem. GGI> Eric S GGI> - Original Message - GGI> From: "Adam Campbell" <[EMAIL PROTECTED]> GGI> To: GGI> Sent: Tuesday, March 14, 2006 10:26 AM GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server >> There's no DATA command. Maybe ASPMail didn't like SMTPD's response to >> the second RCPT TO and didn't give a DATA. >> >> Does ASPMail have a log? >> >> Would verbose logging of SMTPD help? >> >> adamc >> >> Grant Griffith - IMail wrote: >>> Well, we use ASP and ASP.NET and below are the logs I just tracked of one >>> email this mo
RE: [Declude.Virus] Updates from Declude
Thanks David, I was under the impression it was fixed in the version already released. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, March 08, 2006 1:05 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude The next release of Declude which is currently being tested and soon to be released has the confirm changes included. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Wednesday, March 08, 2006 12:47 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Is anyone else using confirm and can let me know if it is working for you now or not? I know John is busy and may not of had time to try it yet and Declude is not responding. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 06, 2006 8:06 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Sounds good John, was just curious if you were still seeing the issue also. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, March 03, 2006 5:27 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude No I have not tested lately. I have been extremely busy this week. I will try on Saturday. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 03, 2006 5:38 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Barry, Wasn’t the confirm issues supposed to be resolved in this version? I just tested it and it still does not subscribe the user after they confirm be replying to the message?!?! John, have you tried this yet with the same results? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 02, 2006 5:04 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Updates from Declude Product Naming After considering all the choices we have decided to rename the new product "Declude Security Suite". I will be notifying the winner(s) of the competition shortly. Declude Security Suite for IMail We have now released additional versions of the software for different levels of IMail and these can be found at http://www.declude.com//Purchase.asp?cat=13 As usual if anyone has questions please contact me and we will do our best to answer. Barry [EMAIL PROTECTED] Office: (978) 499-2933 Cell: (978) 853-9593
RE: [Declude.Virus] Updates from Declude
Haha, no problem John. Just wanted to see if others might have the same issue also. Just wish it was fixed! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Wednesday, March 08, 2006 12:54 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Fine, make a guy feel guilty. Ok, I am over it now. ;) I’ll get to it tonight. I promise. I think. ;-)> John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Wednesday, March 08, 2006 9:47 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Is anyone else using confirm and can let me know if it is working for you now or not? I know John is busy and may not of had time to try it yet and Declude is not responding. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 06, 2006 8:06 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Sounds good John, was just curious if you were still seeing the issue also. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, March 03, 2006 5:27 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude No I have not tested lately. I have been extremely busy this week. I will try on Saturday. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 03, 2006 5:38 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Barry, Wasn’t the confirm issues supposed to be resolved in this version? I just tested it and it still does not subscribe the user after they confirm be replying to the message?!?! John, have you tried this yet with the same results? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 02, 2006 5:04 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Updates from Declude Product Naming After considering all the choices we have decided to rename the new product "Declude Security Suite". I will be notifying the winner(s) of the competition shortly. Declude Security Suite for IMail We have now released additional versions of the software for different levels of IMail and these can be found at http://www.declude.com//Purchase.asp?cat=13 As usual if anyone has questions please contact me and we will do our best to answer. Barry [EMAIL PROTECTED] Office: (978) 499-2933 Cell: (978) 853-9593
RE: [Declude.Virus] Updates from Declude
Is anyone else using confirm and can let me know if it is working for you now or not? I know John is busy and may not of had time to try it yet and Declude is not responding. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 06, 2006 8:06 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Sounds good John, was just curious if you were still seeing the issue also. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, March 03, 2006 5:27 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude No I have not tested lately. I have been extremely busy this week. I will try on Saturday. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 03, 2006 5:38 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Barry, Wasn’t the confirm issues supposed to be resolved in this version? I just tested it and it still does not subscribe the user after they confirm be replying to the message?!?! John, have you tried this yet with the same results? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 02, 2006 5:04 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Updates from Declude Product Naming After considering all the choices we have decided to rename the new product "Declude Security Suite". I will be notifying the winner(s) of the competition shortly. Declude Security Suite for IMail We have now released additional versions of the software for different levels of IMail and these can be found at http://www.declude.com//Purchase.asp?cat=13 As usual if anyone has questions please contact me and we will do our best to answer. Barry [EMAIL PROTECTED] Office: (978) 499-2933 Cell: (978) 853-9593
RE: [Declude.Virus] Updates from Declude
Sounds good John, was just curious if you were still seeing the issue also. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, March 03, 2006 5:27 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude No I have not tested lately. I have been extremely busy this week. I will try on Saturday. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 03, 2006 5:38 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Updates from Declude Barry, Wasn’t the confirm issues supposed to be resolved in this version? I just tested it and it still does not subscribe the user after they confirm be replying to the message?!?! John, have you tried this yet with the same results? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 02, 2006 5:04 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Updates from Declude Product Naming After considering all the choices we have decided to rename the new product "Declude Security Suite". I will be notifying the winner(s) of the competition shortly. Declude Security Suite for IMail We have now released additional versions of the software for different levels of IMail and these can be found at http://www.declude.com//Purchase.asp?cat=13 As usual if anyone has questions please contact me and we will do our best to answer. Barry [EMAIL PROTECTED] Office: (978) 499-2933 Cell: (978) 853-9593
RE: [Declude.Virus] Updates from Declude
Barry, Wasn’t the confirm issues supposed to be resolved in this version? I just tested it and it still does not subscribe the user after they confirm be replying to the message?!?! John, have you tried this yet with the same results? Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 02, 2006 5:04 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Updates from Declude Product Naming After considering all the choices we have decided to rename the new product "Declude Security Suite". I will be notifying the winner(s) of the competition shortly. Declude Security Suite for IMail We have now released additional versions of the software for different levels of IMail and these can be found at http://www.declude.com//Purchase.asp?cat=13 As usual if anyone has questions please contact me and we will do our best to answer. Barry [EMAIL PROTECTED] Office: (978) 499-2933 Cell: (978) 853-9593
RE: [Declude.Virus] Changes @ Declude
I have not seen it either, I just received an email on Thursday saying details coming soon… Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Friday, February 10, 2006 1:55 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Changes @ Declude I for one do not recall receiving such an e-mail. I'm not complaining, just posting here in case others have a similar issue. Since I didn't get it, is there a way to see that e-mail online someplace? Thanks, Rob From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, February 10, 2006 12:47 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Changes @ Declude In the last 10 days we have received a number of inquiries to the email sent to every customer explaining the changes that are happening here at Declude. To summarize the answers to those questions:
RE: [Declude.Virus] Declude Release 3.0.5.23
Barry, Does this happen to fix the Confirm issue of looking at the wrong location for the D or Q files??? Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, December 29, 2005 2:32 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Declude Release 3.0.5.23 There has been an intermittent bug in Declude that reported certain features in the Pro version were not available. There is no function within Declude to downgrade functionality other than by changing the key in the configuration file which is under the control of our customers. There is no remote capability for anyone at Declude to change the contents of a customer’s configuration file. The latest release posted today 3.0.5.23 contains a fix for this bug. We recognize that some customers had issues with our licensing software over the last weekend. We had thoroughly tested this when we first released this version of the licensing software, including turning off of the server and we were confident that this type of issue would not arise. It seems however that with the communications failure (Verizon) a problem arose for a limited number of our customers. We analyzed the code this week and thanks to customers who worked with us on this and the problem has now been resolved. The fix is in 3.0.5.23 We have designed a new, simplified licensing application that will be released with Declude 4.0 and we will post more details closer to the time. Barry -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.371 / Virus Database: 267.14.9/216 - Release Date: 12/29/2005
RE: [Declude.Virus] Declude with IMail 2006
Yep, my faith in the non-Scott Declude is going downhill fairly quickly. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Thursday, December 22, 2005 1:53 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Declude with IMail 2006 What is sad is that the fix is very simple, as I have pointed out to Declude exactly what the problem is. When the confirmation is received, Declude Confirm is looking at the wrong location for the D or Q file. One of the files gets properly renamed and moved, but the other does not. John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Grant Griffith > Sent: Thursday, December 22, 2005 9:38 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] Declude with IMail 2006 > > That has been an issue with confirmation for some time. I have been told > multiple times that it would be fixed after Imail 2006 is released, but have > never heard any more. I am guessing they are just forgetting about it as it > is a free product. I hope it gets fixed soon though... > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Donn Bly > Sent: Thursday, December 22, 2005 10:22 AM > To: Declude.Virus@declude.com > Subject: [Declude.Virus] Declude with IMail 2006 > > Just in case anybody is interested, we upgraded to Imail 2006 last week, and > we aren't having any problems using declude v3.0.5.22 with it EXCEPT that > the confirm function for listserves doesn't seem to work right. Declude > intercepts the subscription and sends out the notification for the double > opt-in, but doesn't seem to see replies when they come back. > > Oh, an just in case you were thinking of upgrading to 2006 -- don't. > Ipswitch released a patch for it today which they claim addresses some of > the problems we're having, but our big webmail users have been screaming > bloody murder ever since we upgraded. I'll be putting in the upgrade on > Monday and we'll see how much it fixes... > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Declude with IMail 2006
That has been an issue with confirmation for some time. I have been told multiple times that it would be fixed after Imail 2006 is released, but have never heard any more. I am guessing they are just forgetting about it as it is a free product. I hope it gets fixed soon though... Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Donn Bly Sent: Thursday, December 22, 2005 10:22 AM To: Declude.Virus@declude.com Subject: [Declude.Virus] Declude with IMail 2006 Just in case anybody is interested, we upgraded to Imail 2006 last week, and we aren't having any problems using declude v3.0.5.22 with it EXCEPT that the confirm function for listserves doesn't seem to work right. Declude intercepts the subscription and sends out the notification for the double opt-in, but doesn't seem to see replies when they come back. Oh, an just in case you were thinking of upgrading to 2006 -- don't. Ipswitch released a patch for it today which they claim addresses some of the problems we're having, but our big webmail users have been screaming bloody murder ever since we upgraded. I'll be putting in the upgrade on Monday and we'll see how much it fixes... --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Declude with IMail 8.22?
Hello All, We just upgrade to Imail 8.22 overnight and was wanting to check and see what version of Declude everyone was running with it. We are still running version 2.0.6.16 right now and remember some talk a while back that you need to upgrade to a newer version as 8.22 added some things that gave Declude problems. Can anyone let me know what version they are running without issues with Imail 8.22? Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Declude Technical Support Tickets
Hey David, Thanks for the info, might want to throw a quick JavaScript on there that forces the subject to be entered? I really appreciate all the work Declude does for us, just wish some of the issues were not sat aside sometimes. Been waiting on a fix to Declude Confirm for nearly 3 or 4 months now... Hoping that this is really fixed once the Imail 2006 is released... Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ] Sent: Wednesday, November 09, 2005 9:30 AM To: Declude.JunkMail@declude.com Cc: Declude.Virus@declude.com Subject: [Declude.Virus] Declude Technical Support Tickets Please note that we receive a large amount of spam at our technical support email address for the ticket system. When I look through the tickets, I delete whatever looks like spam, as well as all tickets that do not contain a subject. Fortunately I keep backup copies of all incoming tech support email. I discovered a backup copy this morning of a legitimate ticket that I had deleted because it lacked a subject: completely blank. Please always provide a subject when you send email to technical support because it allows us to see at a glance whether we have several instances of an issue and also to prioritize the tickets. We have to delete emails that do not contain a subject because it takes too much time to open every email without a subject merely to determine whether it is valid or not. To facilitate processing of trouble tickets, please do not generate multiple tickets for the same issue. Simply reply to our email, which will contain the ticket number as part of the subject line. If we resolve an issue and close a ticket and the issue creeps up again, you can always reply to the last reply you received from us on that ticket. This will automatically re-open the same ticket and we will have acess to all information previously provided by you. Thanks for your cooperation and assistance. David Franco-Rocha Declude Technical / Engineering --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Admin - Please unsubscribe me
There are issues with Declude Confirm if they are using their own product. I have been reporting this for some time, but they are working on getting the new Beta working instead and were going to focus on Confirm later as it is a free product. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Smith Sent: Friday, September 23, 2005 1:31 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Admin - Please unsubscribe me Hi Matt, As I said in my original message I was aware of Imail's problem with HTML messages and have therefore sent 2 seperate requests to unsubscibe to this list in Plain Text and it does nothing. I cannot get off this list and need the admin to do it because the automated way does not work. - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Friday, September 23, 2005 11:26 AM Subject: Re: [Declude.Virus] Admin - Please unsubscribe me Don and Jim, I believe this is an issue with IMail's listserv functionality. I believe that it desires a plain text response. Try sending the commands in a plain text message. Matt Don Duffy wrote: Jim,If you figure how to get off of this list, please let me know. I must have unsubscribed ten times with no success. Good luck! On 23 Sep 2005 at 8:55, Jim Smith wrote: Sorry to post to the list but I am hoping the admin of this list sees this. I want to unsubscribe and have followed the procedure 3 times to unsubscribe by sending email to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". I have sent them in plain text formatted emails and nothing is happening. I still am on the list. Please remove me if you do not mindThank You ---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus". The archives can be foundat http://www.mail-archive.com.---[This E-mail was scanned for viruses] - Don DuffyManager, Technical ServicesOffice 330-684-5103Fax 330-684-5122www.orrutilities.com ---[This E-mail was scanned for viruses] ---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted
Is anyone using Declude Confirm with success in this beta version? Was just curious if it is working properly now in this newer version. I am still running version 2.0.6.16 as I don't have a test box to play with. But I really need to get Declude Confirm working so was thinking of going with the beta this weekend. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 10:41 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Declude 3.0 Beta for IMail and Summer Sales Promotion
Anyone have any feedback on the new Beta yet? We do not have a test box, therefore we will wait a while to see what others have to say about it before going on the production box with it. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, August 29, 2005 1:31 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Declude 3.0 Beta for IMail and Summer Sales Promotion Declude 3.0 Beta for IMail - The beta software is now available through the regular log-in http://www.declude.com/myaccount.asp? And follow the link for 'Beta Program'. Please be sure to read the notes with this beta before downloading and installing the software. Declude 3.0 Beta for SmarterMail will follow shortly. Summer Sales Promotion - This will end at 12 midnight (CST) on August 31, 2005. Any orders time stamped on our server before the deadline will be eligible for the appropriate upgrade or discount. If you have any questions please call us at (866) 332-5833 between 8.00am and 5.00pm Eastern Time. Best regards Barry --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Zip Vulnerability?
Thanks Scott, Sounds like the same problem the other person was talking about. I can not find anything in the archives or manual, but I thought you could tell Declude to skip certain vulnerability test, is this true? If so, how can I do that? This is a printing company and I am sure they are using Mac's which might not put things in the correct format. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, August 09, 2005 2:09 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Zip Vulnerability? http://www.mail-archive.com/declude.virus@declude.com/msg12070.html This vulnerability is triggered if the file format diverges from the official ZIP format specification. - Original Message - From: "Grant Griffith" <[EMAIL PROTECTED]> To: Sent: Tuesday, August 09, 2005 1:42 PM Subject: [Declude.Virus] Zip Vulnerability? > Have a customer trying to send an message and it is being caught saying > Invalid ZIP Vulnerability. Anyone know what this is? Nothing in the > Declude manual on this one. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Zip Vulnerability?
Have a customer trying to send an message and it is being caught saying Invalid ZIP Vulnerability. Anyone know what this is? Nothing in the Declude manual on this one. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Virus Log Batch?
Does anyone have a batch file that runs the Virus Log Analyzer on a nightly basis and emails the results to an admin? We are wanting to run this report on a nightly or every so many hours to send the report to the network security person to contact the customer and let them know they are sending viruses out. I have looked on the Declude site, but the one link to a batch file is not working. We are mostly intereted in the IP the email is coming from. We can not control incoming much, but can control the outgoing. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000
RE: [Declude.Virus] Limit Size of message to be scanned?
Anyone roll back to Imail 8.15 from 8.2? Was it an easy step? Looked at the Imail archives and guess I will contact support if no one has any ideas. I need to roll back though until Declude finds a fix. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, July 08, 2005 10:36 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Limit Size of message to be scanned? Grant, Here are the links to the messages Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html Update - http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html Hope this helps Darrell --- DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. http://www.invariantsystems.com Grant Griffith writes: > Hey All, > > Is there a known issue with Declude 2.0.6.16 and Imail 8.2? I recall > reading something a few weeks ago about a possible issue and we did just > upgrade toward the end of last week. > > I scanned the archives, but did not find anything specific. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith > Sent: Friday, July 08, 2005 9:38 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] Limit Size of message to be scanned? > > Thanks Darrell, > > I knew the setting was there somewhere, but kept overlooking it. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Friday, July 08, 2005 9:34 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] Limit Size of message to be scanned? > > Grant, > > What I do is set the "Single Message Size" under the domain. The limit I > have in place for most of my sites I maintain is between 10MB - 20MB. > > If this is a store and forward server you can set this on the primary domain > > of the server and it affects all of the domains you gateway for. > > Darrell > > Check out http://www.invariantsystems.com for utilities for Declude And > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG > > Integration, and Log Parsers. > > > > Grant Griffith writes: > >> Darrell, >> >> How can I do this on the Imail end? I can limit attachments sent thru Web >> Messaging, but not via Outlook or anything else. At least I can not find >> any settings for that. >> >> Thanks, >> Grant Griffith >> EI8HTLEGS, A Division of ETC >> (812)932-1000 >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell >> ([EMAIL PROTECTED]) >> Sent: Friday, July 08, 2005 9:13 AM >> To: Declude.Virus@declude.com >> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? >> >> Grant, >> >> Their is nothing native to Declude to prevent that - the only real option >> besides something custom is to limit the size at the imail layer. >> >> Darrell >> >> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default >> configuration. http://www.invariantsystems.com >> >> >> Grant Griffith writes: >> >>> Yep, we had one client send a 50+ and 45+ at the same time. That is > about >>> the same time the system locked up. It is a Dual Pentium 3.6 processors >>> with at least 2 gig of memory. I would of hoped it could keep up, but >> seems >>> to be a pattern this week whenever huge emails get sent thru the server, >> it >>> locks up and needs rebooted to fix it. >>> >>> >>> >>> How does anyone else handle this? I would guess there would be a way to >> not >>> scan messages over a certain size >>> >>> >>> >>> Thanks, >>> >>> Grant Griffith >>> >>> EI8HTLEGS, A Division of ETC >>> >>> (812)932-1000 >>> >>> _ >>> >>> From: [EMAIL PROTECTED] >>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff >
RE: [Declude.Virus] Limit Size of message to be scanned?
Thanks Darrell, Guess I will be contacting support ASAP. I want to beta! Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, July 08, 2005 10:36 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Limit Size of message to be scanned? Grant, Here are the links to the messages Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html Update - http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html Hope this helps Darrell --- DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. http://www.invariantsystems.com Grant Griffith writes: > Hey All, > > Is there a known issue with Declude 2.0.6.16 and Imail 8.2? I recall > reading something a few weeks ago about a possible issue and we did just > upgrade toward the end of last week. > > I scanned the archives, but did not find anything specific. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith > Sent: Friday, July 08, 2005 9:38 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] Limit Size of message to be scanned? > > Thanks Darrell, > > I knew the setting was there somewhere, but kept overlooking it. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Friday, July 08, 2005 9:34 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] Limit Size of message to be scanned? > > Grant, > > What I do is set the "Single Message Size" under the domain. The limit I > have in place for most of my sites I maintain is between 10MB - 20MB. > > If this is a store and forward server you can set this on the primary domain > > of the server and it affects all of the domains you gateway for. > > Darrell > > Check out http://www.invariantsystems.com for utilities for Declude And > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG > > Integration, and Log Parsers. > > > > Grant Griffith writes: > >> Darrell, >> >> How can I do this on the Imail end? I can limit attachments sent thru Web >> Messaging, but not via Outlook or anything else. At least I can not find >> any settings for that. >> >> Thanks, >> Grant Griffith >> EI8HTLEGS, A Division of ETC >> (812)932-1000 >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell >> ([EMAIL PROTECTED]) >> Sent: Friday, July 08, 2005 9:13 AM >> To: Declude.Virus@declude.com >> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? >> >> Grant, >> >> Their is nothing native to Declude to prevent that - the only real option >> besides something custom is to limit the size at the imail layer. >> >> Darrell >> >> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default >> configuration. http://www.invariantsystems.com >> >> >> Grant Griffith writes: >> >>> Yep, we had one client send a 50+ and 45+ at the same time. That is > about >>> the same time the system locked up. It is a Dual Pentium 3.6 processors >>> with at least 2 gig of memory. I would of hoped it could keep up, but >> seems >>> to be a pattern this week whenever huge emails get sent thru the server, >> it >>> locks up and needs rebooted to fix it. >>> >>> >>> >>> How does anyone else handle this? I would guess there would be a way to >> not >>> scan messages over a certain size >>> >>> >>> >>> Thanks, >>> >>> Grant Griffith >>> >>> EI8HTLEGS, A Division of ETC >>> >>> (812)932-1000 >>> >>> _ >>> >>> From: [EMAIL PROTECTED] >>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff >>> (Lists) >>> Sent: Friday, July 08, 2005 2:05 AM >>> To: Declude.Virus@declude.com >>> Subj
RE: [Declude.Virus] Limit Size of message to be scanned?
Hey All, Is there a known issue with Declude 2.0.6.16 and Imail 8.2? I recall reading something a few weeks ago about a possible issue and we did just upgrade toward the end of last week. I scanned the archives, but did not find anything specific. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, July 08, 2005 9:38 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Limit Size of message to be scanned? Thanks Darrell, I knew the setting was there somewhere, but kept overlooking it. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, July 08, 2005 9:34 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Limit Size of message to be scanned? Grant, What I do is set the "Single Message Size" under the domain. The limit I have in place for most of my sites I maintain is between 10MB - 20MB. If this is a store and forward server you can set this on the primary domain of the server and it affects all of the domains you gateway for. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Grant Griffith writes: > Darrell, > > How can I do this on the Imail end? I can limit attachments sent thru Web > Messaging, but not via Outlook or anything else. At least I can not find > any settings for that. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Friday, July 08, 2005 9:13 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] Limit Size of message to be scanned? > > Grant, > > Their is nothing native to Declude to prevent that - the only real option > besides something custom is to limit the size at the imail layer. > > Darrell > > InvURIBL - Intelligent URL filtering - stops 85% of spam with the default > configuration. http://www.invariantsystems.com > > > Grant Griffith writes: > >> Yep, we had one client send a 50+ and 45+ at the same time. That is about >> the same time the system locked up. It is a Dual Pentium 3.6 processors >> with at least 2 gig of memory. I would of hoped it could keep up, but > seems >> to be a pattern this week whenever huge emails get sent thru the server, > it >> locks up and needs rebooted to fix it. >> >> >> >> How does anyone else handle this? I would guess there would be a way to > not >> scan messages over a certain size >> >> >> >> Thanks, >> >> Grant Griffith >> >> EI8HTLEGS, A Division of ETC >> >> (812)932-1000 >> >> _ >> >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff >> (Lists) >> Sent: Friday, July 08, 2005 2:05 AM >> To: Declude.Virus@declude.com >> Subject: RE: [Declude.Virus] Limit Size of message to be scanned? >> >> >> >> 50 MB e-mail attachments? >> >> >> >> Youch! >> >> >> >> John T >> >> eServices For You >> >> >> >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith >> Sent: Thursday, July 07, 2005 8:36 PM >> To: Declude.Virus@declude.com >> Subject: [Declude.Virus] Limit Size of message to be scanned? >> >> >> >> Hello All, >> >> >> >> Is there a way to limit the size of the message that Declude/F-Prot can >> scan? We have some customers that are sending 50+ meg files and it is >> causing our servers to have major issues. Is there a setting to say skip >> anything over a certain size? Either in F-Prot or Declude? >> >> >> >> We fixed it currently by setting it to OFF for certain domains, but really >> want to ban extensions and vulnerabilities for those domains.. >> >> >> >> >> >> Thanks, >> >> Grant Griffith >> >> EI8HTLEGS, A Division of ETC >> >> (812)932-1000 &
RE: [Declude.Virus] Limit Size of message to be scanned?
Thanks Darrell, I knew the setting was there somewhere, but kept overlooking it. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, July 08, 2005 9:34 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Limit Size of message to be scanned? Grant, What I do is set the "Single Message Size" under the domain. The limit I have in place for most of my sites I maintain is between 10MB - 20MB. If this is a store and forward server you can set this on the primary domain of the server and it affects all of the domains you gateway for. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Grant Griffith writes: > Darrell, > > How can I do this on the Imail end? I can limit attachments sent thru Web > Messaging, but not via Outlook or anything else. At least I can not find > any settings for that. > > Thanks, > Grant Griffith > EI8HTLEGS, A Division of ETC > (812)932-1000 > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Friday, July 08, 2005 9:13 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] Limit Size of message to be scanned? > > Grant, > > Their is nothing native to Declude to prevent that - the only real option > besides something custom is to limit the size at the imail layer. > > Darrell > > InvURIBL - Intelligent URL filtering - stops 85% of spam with the default > configuration. http://www.invariantsystems.com > > > Grant Griffith writes: > >> Yep, we had one client send a 50+ and 45+ at the same time. That is about >> the same time the system locked up. It is a Dual Pentium 3.6 processors >> with at least 2 gig of memory. I would of hoped it could keep up, but > seems >> to be a pattern this week whenever huge emails get sent thru the server, > it >> locks up and needs rebooted to fix it. >> >> >> >> How does anyone else handle this? I would guess there would be a way to > not >> scan messages over a certain size >> >> >> >> Thanks, >> >> Grant Griffith >> >> EI8HTLEGS, A Division of ETC >> >> (812)932-1000 >> >> _ >> >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff >> (Lists) >> Sent: Friday, July 08, 2005 2:05 AM >> To: Declude.Virus@declude.com >> Subject: RE: [Declude.Virus] Limit Size of message to be scanned? >> >> >> >> 50 MB e-mail attachments? >> >> >> >> Youch! >> >> >> >> John T >> >> eServices For You >> >> >> >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith >> Sent: Thursday, July 07, 2005 8:36 PM >> To: Declude.Virus@declude.com >> Subject: [Declude.Virus] Limit Size of message to be scanned? >> >> >> >> Hello All, >> >> >> >> Is there a way to limit the size of the message that Declude/F-Prot can >> scan? We have some customers that are sending 50+ meg files and it is >> causing our servers to have major issues. Is there a setting to say skip >> anything over a certain size? Either in F-Prot or Declude? >> >> >> >> We fixed it currently by setting it to OFF for certain domains, but really >> want to ban extensions and vulnerabilities for those domains.. >> >> >> >> >> >> Thanks, >> >> Grant Griffith >> >> EI8HTLEGS, A Division of ETC >> >> (812)932-1000 >> >> >> > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Limit Size of message to be scanned?
Darrell, How can I do this on the Imail end? I can limit attachments sent thru Web Messaging, but not via Outlook or anything else. At least I can not find any settings for that. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, July 08, 2005 9:13 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Limit Size of message to be scanned? Grant, Their is nothing native to Declude to prevent that - the only real option besides something custom is to limit the size at the imail layer. Darrell InvURIBL - Intelligent URL filtering - stops 85% of spam with the default configuration. http://www.invariantsystems.com Grant Griffith writes: > Yep, we had one client send a 50+ and 45+ at the same time. That is about > the same time the system locked up. It is a Dual Pentium 3.6 processors > with at least 2 gig of memory. I would of hoped it could keep up, but seems > to be a pattern this week whenever huge emails get sent thru the server, it > locks up and needs rebooted to fix it. > > > > How does anyone else handle this? I would guess there would be a way to not > scan messages over a certain size???? > > > > Thanks, > > Grant Griffith > > EI8HTLEGS, A Division of ETC > > (812)932-1000 > > _ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff > (Lists) > Sent: Friday, July 08, 2005 2:05 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] Limit Size of message to be scanned? > > > > 50 MB e-mail attachments? > > > > Youch! > > > > John T > > eServices For You > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith > Sent: Thursday, July 07, 2005 8:36 PM > To: Declude.Virus@declude.com > Subject: [Declude.Virus] Limit Size of message to be scanned? > > > > Hello All, > > > > Is there a way to limit the size of the message that Declude/F-Prot can > scan? We have some customers that are sending 50+ meg files and it is > causing our servers to have major issues. Is there a setting to say skip > anything over a certain size? Either in F-Prot or Declude? > > > > We fixed it currently by setting it to OFF for certain domains, but really > want to ban extensions and vulnerabilities for those domains.. > > > > > > Thanks, > > Grant Griffith > > EI8HTLEGS, A Division of ETC > > (812)932-1000 > > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Limit Size of message to be scanned?
Yep, we had one client send a 50+ and 45+ at the same time. That is about the same time the system locked up. It is a Dual Pentium 3.6 processors with at least 2 gig of memory. I would of hoped it could keep up, but seems to be a pattern this week whenever huge emails get sent thru the server, it locks up and needs rebooted to fix it. How does anyone else handle this? I would guess there would be a way to not scan messages over a certain size Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, July 08, 2005 2:05 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 50 MB e-mail attachments? Youch! John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Thursday, July 07, 2005 8:36 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Limit Size of message to be scanned? Hello All, Is there a way to limit the size of the message that Declude/F-Prot can scan? We have some customers that are sending 50+ meg files and it is causing our servers to have major issues. Is there a setting to say skip anything over a certain size? Either in F-Prot or Declude? We fixed it currently by setting it to OFF for certain domains, but really want to ban extensions and vulnerabilities for those domains…. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000
[Declude.Virus] Limit Size of message to be scanned?
Hello All, Is there a way to limit the size of the message that Declude/F-Prot can scan? We have some customers that are sending 50+ meg files and it is causing our servers to have major issues. Is there a setting to say skip anything over a certain size? Either in F-Prot or Declude? We fixed it currently by setting it to OFF for certain domains, but really want to ban extensions and vulnerabilities for those domains…. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000
RE: [Declude.Virus] U can check out but you can never leave
Title: U can check out but you can never leave This is a known issue of Declude Confirm, but they have not had time to fix it yet. Although I am thinking they thought they fixed it with the latest beta, but I have not verified that on my end yet. Might want to email support and see if they can get you unsubscribed. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Tuesday, July 05, 2005 8:15 AM To: Declude.Virus@declude.com Subject: [Declude.Virus] U can check out but you can never leave Sorry to interrupt with a non technical post but… I have tried 3 times already to unsubscribe from this list. I get the confirmation request, I send it off, but I never receive notification that I've been unsubscribed. Then, I get more email from the list. I love you guys but I am going to be on vacation for a long time and really don't need the extra email. I'm having the same issues with the declude.junkmail list too. Can someone PLEASE unsubscribe me from both lists Thanks, Sharyn
RE: [Declude.Virus] Ignoring "Boundary Space Gap" Vulnerability
It has taken as long as a week for me to get a response before. Although most times it is within a day or two. Not as quick as it used to be with Scott where you heard back within an hour or so. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Wednesday, June 29, 2005 8:28 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Ignoring "Boundary Space Gap" Vulnerability Thanks for the info, Darrell. I'm sure that'll be enough to get me pointed in the right direction. I had another quick question for anyone willing to answer. Typically I get most of my questions answered through these Declude discussion lists. Yesterday afternoon I submitted a request to [EMAIL PROTECTED] regarding this issue (and a few tertiary issues) and I have yet to get any sort of response whatsoever. I checked their web site and they said that e-mail is the best way to get support. Is this typical of Declude's support to be unresponsive like this? TIA, Dan - Original Message - From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]> To: Sent: Tuesday, June 28, 2005 5:35 PM Subject: Re: [Declude.Virus] Ignoring "Boundary Space Gap" Vulnerability > Dan, > I have been running 2.0.6 with no "major" issues that plague me on a daily > basis. The only issue I have encountered is when the server is under high > load and Declude spawns processes until the server starts generating > errors. Since I upgraded the server it doesnt happen very often. > For the install you can grab the package from "your account" on the > declude site. The manual install was pretty easy - just install and > select manual along with a directory. The upgrade for 2.0.6.16 the last > beta is just an exe download. > Hope this helps, > Darrell > > Check out http://www.invariantsystems.com for utilities for Declude And > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, > MRTG Integration, and Log Parsers. > > > Dan Geiser writes: >> Hi, Again, >> I was able to find the "ALLOWVULNERABILITIESFROM" in the Declude Release >> Notes, http://www.declude.com/Articles.asp?ID=122. It looks like this >> feature was added in Declude 2.0. But it appears the current version of >> Declude 2.0.6. Since we are running 1.82 I assume that I'll have to >> upgrade to 2.0 at least. Is 2.0.6 a safe version to upgrade to in light >> of the issues people have added with bugs and the like? If so, is there >> a special place where I can go to get instructions on doing a Manual >> Upgrade to 2.0.6? Thanks In Advance, >> Dan Geiser >> [EMAIL PROTECTED] - Original Message - From: "Dan >> Geiser" <[EMAIL PROTECTED]> >> To: >> Sent: Tuesday, June 28, 2005 3:52 PM >> Subject: [Declude.Virus] Ignoring "Boundary Space Gap" Vulnerability >>> Hello, All, >>> We are running... Declude 1.82 >>> Declude JunkMail Status: PRO version registered. >>> Declude Virus Status:Standard Version Registered. We >>> have a customer who has an important e-mail which is being blocked by >>> our >>> virus protection with the "Outlook 'Boundary Space Gap' Vulnerability". >>> Is there anyway that I can turn off checking for the "Outlook 'Boundary >>> Space Gap' Vulnerability" on either a specific incoming e-mail address >>> or a >>> specific incoming e-mail domain? Thanks In Advance, >>> Dan Geiser >>> [EMAIL PROTECTED] --- >>> E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- >>> This E-mail came from the Declude.Virus mailing list. To >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>> type "unsubscribe Declude.Virus".The archives can be found >>> at http://www.mail-archive.com. >>> --- >>> E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) >> --- >> E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus".The archives can be found >> at http://www.mail-archive.co
[Declude.Virus] Declude Confirm?
Hello All, I know this is not a list of the confirm product, but has anyone else had problems with Declude Confirm? It appears from the message below that it is a known issue and wondering what anyone has done to work around it??? Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 16, 2005 8:17 AM To: [EMAIL PROTECTED] Subject: [0BB-0A43ECB4-7284] Declude Confirm? Grant, We are in fact aware of this problem. However, since Declude Confirm is a free utility, we do not currently support it. We plan to take a look at this issue as time permits. Our highest priority is assigned to enhancements and bug fixes for the other products. We understand that this issue presents a problem for you. We will address it when we are able and will post a message to the mailing lists when it has been resolved. David Franco-Rocha Declude Technical Support From: "Tech Support" <[EMAIL PROTECTED]> Sent: Thu, 16 Jun 2005 07:54:28 -0500 To: <[EMAIL PROTECTED]> Subject: Declude Confirm? Hello, I am having problems with Declude Confirm not always accepting the confirmation messages. I am attaching a couple of messages that show where they were sent the original confirmation and then when they response it appears they are sent another one rather than actually subscribing them. Can you confirm this? Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000
RE: [Declude.Virus] Microsoft GDI+ Security Update
I ran the windows update on my desktop and it went fine, however if you use Net Meeting I would hold off. After installing the patches Microsoft sends, when I try to start Net Meeting the screen goes blank and the PC reboots. I have sent an issue to Microsoft, but have not heard anything back yet. Thanks, Grant Griffith EI8HT LEGS, A Division of ETC (877)483-3393 (812)933-5390 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rodney Bertsch Sent: Wednesday, September 15, 2004 10:09 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Microsoft GDI+ Security Update Oh great... just what we need now. Another avenue for viruses to come after us? Does anybody know anything more about this JPEG vulnerability they're talking about? Are there even any viruses that use this yet? I haven't installed Microsoft's patch yet and wondered what other people's thoughts were on the issue. Thanks, Rodney Bertsch IS Coordinator Kirk NationaLease Co. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] suggestion for the Virus Manual
They usually update the manual when a released version is out and that has not happened in a long time. I am guessing they are working on a better manual and releasing something before too long. Grant -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Monday, August 09, 2004 1:41 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] suggestion for the Virus Manual Scott: Just a suggestion for Declude Virus Manual and sample virus config file Could you add a section that explains how the following work BANZIPEXTS BANEZIPEXTS As far as I have seen the only way to learn how it works is by reading the release notes and the list. New users and old ones will benefit from it Luis Arango __ [Email scanned for viruses by Panda Consulting -www.pandacons.com-] [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Netsky.P Occasionally Slips through?
Just add the VIRUSCODE 8 to the config files. Note that it may have some false positives, but we are OK with that. Would rather that than a possible virus getting thru. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Douglas Cohn Sent: Tuesday, March 30, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Netsky.P Occasionally Slips through? If F-prot notes a file as suspicious is it stopped by declude or passed. Can this be a setting possibly? IE if F-prot notes it as suspicious allow declude to block it. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, March 29, 2004 8:52 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Netsky.P Occasionally Slips through? >F-Prot's manual scan results: >C:\eudora\ATTACH\document_all02c.zip->document.txt > a security risk or a "backdoor" program That sounds like an exit code of 8, meaning that F-Prot detected a suspicious file, but not a virus. Would it be possible to E-mail the .ZIP file to the declude.com virustrap@ address, so we can analyze it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] F-prot passing Netsky.P or variant?
I had one slip thru to me this morning also... McAfee detected it on my system as the W32/Netsky.b.eml!zip virus. Not sure as to where it quarantined the file too, but I was surprised my banext's did not catch it also. Sincerely,Grant Griffith, Vice PresidentEI8HT LEGS Web Management Co., Inc.http://www.getafreewebsite.com877-483-3393 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Darin CoxSent: Thursday, March 25, 2004 10:17 AMTo: [EMAIL PROTECTED]Subject: [Declude.Virus] F-prot passing Netsky.P or variant? Anyone else having trouble with a lot of new viruses slipping through? I submitted two to F-Prot earlier this morning, but they are claiming that the attachments were Netsky.P. However, I have the latest virus defs from them and the virus logs clearly show them being scanned and virus free. I'm betting it's a new, fast-spreading variant or Netsky, but am curious as to what others are seeing.. Darin.
RE: [Declude.Virus] Beagle@mm!zip got past declude & fprot
The BANZIPEXTS and BANEZIPEXTS just tell it to ban files inside the zip file if they match on of the BANEXT extensions. Therefore it will not catch encrypted zip files unless it has a file with any of those extensions in it. If you want to catch ALL encrypted Zip files you need to add BANEXT EZIP to your list. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Donn Bly Sent: Monday, March 22, 2004 4:10 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [EMAIL PROTECTED] got past declude & fprot I'm running Declude 1.78i27 I'm running FProt 3.14e I just had a customer send me an email that they received that was questionable, and Norton on my desktop caught it as [EMAIL PROTECTED] -- which has been out for a couple of weeks. Since this is an encrypted EXE inside of a zip file, it doesn't suprise me that FProt didn't catch it (actually, according to the log it gave an errorlevel 8), but I thought I had it banned by declude. I have the following in my virus.cfg. BANEXT ocx BANEXT scr BANEXT bat BANEXT vbs BANEXT dll BANEXT pif BANEXT wsh BANEXT cmd BANEXT nws BANEXT exe BANZIPEXTS OFF BANEZIPEXTS ON The idea was that I will let anything go through in a standard zip, but not as a stand-alone file or encrypted in an archive. Where did I screw up? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Log error with latest interim release
Meant version E. Sorry, been a long day. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith - Declude Virus Sent: Thursday, March 18, 2004 12:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Log error with latest interim release I just upgraded to version 3 and am still seeing this. I will contact F-Prot to see if they can give me some insight on this. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, March 18, 2004 12:04 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Log error with latest interim release >03/18/2004 11:20:01 Qcc24005d0536a2e6 Error 128 in virus scanner 1. >03/18/2004 11:21:09 Qcc661aa8032aa581 Error 128 in virus scanner 1. F-Prot doesn't define an exit code of 128 -- I would recommend reinstalling F-Prot and/or moving to the latest version of F-Prot. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Log error with latest interim release
I just upgraded to version 3 and am still seeing this. I will contact F-Prot to see if they can give me some insight on this. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, March 18, 2004 12:04 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Log error with latest interim release >03/18/2004 11:20:01 Qcc24005d0536a2e6 Error 128 in virus scanner 1. >03/18/2004 11:21:09 Qcc661aa8032aa581 Error 128 in virus scanner 1. F-Prot doesn't define an exit code of 128 -- I would recommend reinstalling F-Prot and/or moving to the latest version of F-Prot. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Log error with latest interim release
Scott, We are seeing something similar since upgrading to interim release 178i27. Logs: 03/18/2004 11:19:34 Qcc0742d003962ecf Could not find report file D:\IMAIL\spool\Dcc0742d003962ecf.vir\report.txt. 03/18/2004 11:19:34 Qcc0742d003962ecf Scanned: Banned file extension. [MIME: 2 22185] 03/18/2004 11:19:34 Qcc0742d003962ecf From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 03/18/2004 11:19:34 Qcc0742d003962ecf Subject: hi 03/18/2004 11:19:59 Qcc2b190e032abe2e Scanned: Virus Free [Prescan OK][MIME: 2 8244] 03/18/2004 11:20:01 Qcc24005d0536a2e6 Could not find report file D:\IMAIL\spool\Dcc24005d0536a2e6.vir\report.txt. 03/18/2004 11:20:01 Qcc24005d0536a2e6 Error 128 in virus scanner 1. 03/18/2004 11:20:01 Qcc24005d0536a2e6 Scanned: Error in virus scanner. [MIME: 1 901] 03/18/2004 11:20:43 Qcc4f1a37032a49b5 Could not find report file D:\IMAIL\spool\Dcc4f1a37032a49b5.vir\report.txt. 03/18/2004 11:20:43 Qcc4f1a37032a49b5 Error 128 in virus scanner 1. 03/18/2004 11:20:43 Qcc4f1a37032a49b5 Scanned: Error in virus scanner. [MIME: 1 3045] 03/18/2004 11:21:09 Qcc661aa8032aa581 Could not find report file D:\IMAIL\spool\Dcc661aa8032aa581.vir\report.txt. 03/18/2004 11:21:09 Qcc661aa8032aa581 Error 128 in virus scanner 1. 03/18/2004 11:21:09 Qcc661aa8032aa581 Scanned: Error in virus scanner. [Prescan OK][MIME: 4 33052] Virus.cfg setting: SCANFILEd:\imail\declude\FProt-Win\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 VIRUSCODE 8 REPORT Infection: Still using F-Prot version C! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com Bus. Phone: (877) 483-3393 Cell Phone: (812) 569-6401 -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 18 Mar 2004 10:57:41 -0500 > >>We have been running the latest interims for a couple of weeks (since >>the EZIP stuff came out). We are seeing the following error in the >>virus logs: >> >>03/18/2004 07:25:33 Qa32252df006a099c Could not find parse string >>Infection: in report.txt >>03/18/2004 07:25:33 Qa32252df006a099c Error 8 in virus scanner 1. >>03/18/2004 07:25:33 Qa32252df006a099c Scanned: Error in virus scanner. >>[MIME: 3 23481] > >That is normal. The "Error 8" indicates that F-Prot detected a suspicious >file, in which case it will not know the name of the virus (since it didn't >detect one). > >>We have f-prot 3.14e and Declude v1.78i27. Running on Imail 7.15. Here >>is the Scan line from the virus.cfg: >> >>SCANFILEC:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM >>/ARCHIVE /NOFLOPPY /NOBOOT /DUMB /SERVER /REPORT=report.txt > >The "/SERVER" is not recommended, and will cause the "Error 8"'s. > >-Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers >since 2000. >Declude Virus: Ultra reliable virus detection and the leader in mailserver >vulnerability detection. >Find out what you've been missing: Ask for a free 30-day evaluation. > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] SKIPIFFORGING ?
Hello, Does the SKIPIFFORGING include the Vulnerabilities? I was just looking into why I was not receiving Vulnerability notifications and it appears the SKIPIFFORGING is stopping these from being sent. As an administrator, I would like to receive those in case it might be a legit message. Is there a way I can allow these notifications sent out while leaving the SKIPIFFORGING in place? Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: E-Mail Policies...
Hello Everyone, Does anyone have an email policy they would be willing to share that has info on the files that they currently are banning? We are finally going to begin banning some extensions since these viruses are getting so widespread and we would like to view some polices on this to put on our website. Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Question: Do the new zip commands reject the file extension and not pass the file to the virus scanner
Replying to try and help Scott out... A New Interim release of 1.78i9 is there that checks for viruses first in this case... version i8 blocked by extension first... Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell LaRock Sent: Wednesday, March 03, 2004 11:52 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Question: Do the new zip commands reject the file extension and not pass the file to the virus scanner Running 1.78i8 on Declude Virus Pro. Have both the "BANEXT EZIP" and "BANEZIPEXTS ON" in virus.cfg Question: Currently does the BANEXT EZIP and BANEZIPEXTS ON commands block the mail based on the file extension and not scan the email with the configured virus scanner (See snippet #1 below) i.e. the virus scanner is not called or doesn't appear to be? When checking the file which was banned it does contain a virus (Bagle/h pwd) which was being detected fine prior to the new zip features (see snippet #2)? Issue: Currently the files which should be caught by the virus scanner are not being caught by the scanner BUT being rejected due to the file extension which than generates the bannotify.eml (as you can see from below we now have that turned off right now). Previously (prior to the new zip features) banned extensions (see snippet #3) would appear to be scanned by the scanner and if a virus was found it would not generate the bannotify.eml. Snippet #1 03/03/2004 11:04:16 Q01fea15f01b20d9a MIME file: Letter.zip [base64; Length=20780 Checksum=2629640] 03/03/2004 11:04:16 Q01fea15f01b20d9a Banning .ZIP file with exe extension. 03/03/2004 11:04:16 Q01fea15f01b20d9a Scanned: Banned file extension. [MIME: 2 20916] 03/03/2004 11:04:16 Q01fea15f01b20d9a Couldn't open E-mail file e:\imail\Declude\BANnotify.eml. 03/03/2004 11:04:16 Q01fea15f01b20d9a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 03/03/2004 11:04:16 Q01fea15f01b20d9a Subject: ^_^ meay-meay! Snippet #2 03/02/2004 15:30:25 Qeede7761020e584c MIME file: Letter.zip [base64; Length=20859 Checksum=2628208] 03/02/2004 15:30:25 Qeede7761020e584c Scanner 1: Virus= the W32/Bagle.gen!pwdzip (ED) virus !!! Attachment=Letter.zip [10] O 03/02/2004 15:30:25 Qeede7761020e584c File(s) are INFECTED [ the W32/Bagle.gen!pwdzip (ED) virus !!!: 13] 03/02/2004 15:30:25 Qeede7761020e584c Scanned: CONTAINS A VIRUS [MIME: 2 20975] 03/02/2004 15:30:25 Qeede7761020e584c From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 66.188.246.138] 03/02/2004 15:30:25 Qeede7761020e584c Subject: Hey, ya! =)) Snippet #3 02/25/2004 00:03:52 Q2cb6170b005aec2b MIME file: [text/html][quoted-printable; Length=5254 Checksum=412704] 02/25/2004 00:03:52 Q2cb6170b005aec2b MIME file: [image/gif][base64; Length=3639 Checksum=424621] 02/25/2004 00:03:52 Q2cb6170b005aec2b MIME file: [image/gif][base64; Length=359 Checksum=35758] 02/25/2004 00:03:52 Q2cb6170b005aec2b MIME file: Update28.exe [base64; Length=106496 Checksum=9386997] 02/25/2004 00:03:52 Q2cb6170b005aec2b Banning file with exe extension [application/x-msdownload]. 02/25/2004 00:03:53 Q2cb6170b005aec2b Scanner 1: Virus= the W32/[EMAIL PROTECTED] virus !!! Attachment=Update28.exe [10] O 02/25/2004 00:03:53 Q2cb6170b005aec2b File(s) are INFECTED [ the W32/[EMAIL PROTECTED] virus !!!: 13] 02/25/2004 00:03:53 Q2cb6170b005aec2b Scanned: CONTAINS A VIRUS [Prescan OK][MIME: 5 117540] 02/25/2004 00:03:53 Q2cb6170b005aec2b From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 210.150.150.240] 02/25/2004 00:03:53 Q2cb6170b005aec2b Subject: New Net Patch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, March 03, 2004 11:00 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Summary of new options With the latest interim release, you can use: BANEXT EZIP - This line will ban all .ZIP files with an encrypted file in them BANZIPEXTS ON - This line (Pro version only) will ban all file extensions listed in BANEXT lines, if they appear in non-encrypted .ZIP files BANEZIPEXTS ON - This line (Pro version only) will ban all file extensions listed in BANEXT lines, if they appear in encrypted .ZIP files Also, the latest interim (with the Pro version only) will detect bogus .BAT/.COM/.PIF/.SCR files (automatically as vulnerabilities, with no need for config file entries). If you are having any troubles with these, please re-read the information on them, and then be very clear what is happening. There are a lot of possibilities here. You'll need to specify [1] Whether you are using BANZIPEXTS ON or BANEZIPEXTS ON (or the not-recommended-but-still-useful BANEXT EZIP), [2] Whether you have a BANEXT line to block the appropriate file (BANEXT com, for example), [3] What type of file you are sending through (.com? .com within a .zip?), [4] If it is
RE: [Declude.Virus] Banext and bannotify.eml questions
OK, I have it the other way around, does that matter? [EMAIL PROTECTED],%MailFrom% or something like that? Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, March 02, 2004 12:47 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Banext and bannotify.eml questions >Isn't it possible to modify the Bannotify.eml file and only include the >recipient and postmaster? Would it still send a notice to the sender somehow? The notification will be sent to anyone listed in the To: header. In this case, you can use "To: %ALLRECIPS%,[EMAIL PROTECTED]". -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Banext and bannotify.eml questions
I updated the bannotify.eml file to send to our tech support email, will this not work? I have not received any of them, but just set this up this morning... Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of bill.maillists Sent: Tuesday, March 02, 2004 12:27 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Banext and bannotify.eml questions Scott, >>Can I configure the bannotify.eml to not send messages to the sender of >>the file, but to send them only to the recipient and to me. > >Not currently. > Isn't it possible to modify the Bannotify.eml file and only include the recipient and postmaster? Would it still send a notice to the sender somehow? I have the same situation here. Most dangerous file attachments are stripped by my firewall, but I'm using Declude to stop zips and review them in the virus directory (Thank you for that feature). Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] "[Encrypted .ZIP file]"
Didn't Scott say yesterday that most virus scanner will catch the password protected zip files; however you HAD to update the ENGINE, not just the DEFINITIONS? I am still using F-Prot version b as I heard of too many problems with the C version, does anyone know if the C version is fixed yet? Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Tuesday, March 02, 2004 11:40 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] "[Encrypted .ZIP file]" I've seen that NAI's engine is now able to detect Bagle.h even if contained in passworded zip files. 03/02/2004 17:29:04 Qb64d05700068a0de Scanner 2: Virus=W32/Bagle.h!pwdzip virus !!! Attachment=Readme.zip [18] I 03/02/2004 17:29:04 Qb64d05700068a0de File(s) are INFECTED [[Encrypted .ZIP file]: 13] 03/02/2004 17:29:05 Qb64d05700068a0de Scanned: CONTAINS A VIRUS [MIME: 2 21347] Markus > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Tuesday, March 02, 2004 4:05 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] "[Encrypted .ZIP file]" > > > >The interim release 1.78i5 appears to be making headway against the > >encrypted .zip file but it appears that the sender is > forged. Is this > >suppose to be added to the SKIPIFFORGING database or should > I add it to > >the SKIPIFVIRUSNAMEHAS list and if so what should it be listed as? > >"Encrypted .ZIP file".? > > Yes, that should work fine. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers since 2000. > Declude Virus: Catches known viruses and is the leader in > mailserver vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Declude Virus v1.76b caught the Unknown Virus virus in Unknown File Virus virus in Unknown FileVirus virus in Unknown File
Yep, This is what I have in the virus.cfg file. SCANFILEd:\imail\declude\FProt\f-prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 VIRUSCODE 8 REPORT Infection Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com Bus. Phone: (877) 483-3393 Cell Phone: (812) 569-6401 -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 15 Dec 2003 09:21:30 -0500 > >>Below is the line I have in my virus.cfg file: >> >>SCANFILEd:\imail\declude\FProt\f-prot.exe /TYPE /SILENT /NOMEM >>/ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt >> >>But I still receive the following in my logs when running the virus scanning. >> >>12/11/2003 11:49:32 Qa01a010901fa167a Could not find report file >>D:\IMAIL\spool\Da01a010901fa167a.vir\report.txt. >>12/11/2003 11:49:32 Qa01a010901fa167a File(s) are INFECTED [: 3] > >Do you have a line "REPORT Infection:" in the virus.cfg file? > >-Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers. >Declude Virus: Catches known viruses and is the leader in mailserver >vulnerability detection. >Find out what you've been missing: Ask about our free 30-day evaluation. > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Declude Virus v1.76b caught the Unknown Virus virus in Unknown File Virus virus in Unknown FileVirus virus in Unknown File
Hello Scott, Below is the line I have in my virus.cfg file: SCANFILEd:\imail\declude\FProt\f-prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt But I still receive the following in my logs when running the virus scanning. 12/11/2003 11:49:32 Qa01a010901fa167a Could not find report file D:\IMAIL\spool\Da01a010901fa167a.vir\report.txt. 12/11/2003 11:49:32 Qa01a010901fa167a File(s) are INFECTED [: 3] Just as a note, I had some major problems with this server and had to reinstall service pack 6a on this NT box. Could that of caused something to be messed up? Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com Bus. Phone: (877) 483-3393 Cell Phone: (812) 569-6401 -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 11 Dec 2003 12:04:17 -0500 > >>I have been unsubscribed from the list for a while, but we had some major >>server problems and for some reason after I got everything running again, I >>am receiving this error. The log file says it is not able to find the >>report. Any ideas what to try first? I have renamed the virus.cfg file for >>the time being, but don't want viruses getting thru too long... > >That message will occur if your AV program isn't saving the report.txt file >(or if Declude Virus doesn't know that the AV program is saving it). > >If you use the default settings from the manual for your AV program, it >will work. For example, with F-Prot, you need "/REPORT=report.txt" in the >SCANFILE line and a line "REPORT Infection:". > >-Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers. >Declude Virus: Catches known viruses and is the leader in mailserver >vulnerability detection. >Find out what you've been missing: Ask about our free 30-day evaluation. > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Declude Virus v1.76b caught the Unknown Virus virus in Unknown File
Hello All, I have been unsubscribed from the list for a while, but we had some major server problems and for some reason after I got everything running again, I am receiving this error. The log file says it is not able to find the report. Any ideas what to try first? I have renamed the virus.cfg file for the time being, but don't want viruses getting thru too long... Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] OT: Scheduler Problems...
Just an update on this, it appears other files have disappeared also. FTP no longer works either. Sounds like some files were deleted some how. Does this mean I might have to recover from a backup? Any other ideas on recovering these files that have disappeared? Thanks All... Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith Sent: Friday, June 06, 2003 7:26 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] OT: Scheduler Problems... Hello All, All of a sudden, my NT Scheduler is not working, therefore I am not getting any updates for viruses and things. When I try to start the scheduler from the services area, I get an error saying "the system can not find the file specified". Anyone know where I can get this file for NT 4.0 SP6a? Also what might of happened to this file? It was working fine just a couple of days ago Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: Scheduler Problems...
Hello All, All of a sudden, my NT Scheduler is not working, therefore I am not getting any updates for viruses and things. When I try to start the scheduler from the services area, I get an error saying "the system can not find the file specified". Anyone know where I can get this file for NT 4.0 SP6a? Also what might of happened to this file? It was working fine just a couple of days ago Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Declude v1.51 (beta) released
Scott, Downloaded the 1.51 beta, but it is still saying it is 1.50. Did the version number not get updated or do I need to re-download this? Thanks!! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, May 01, 2002 8:41 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Declude.Virus] Declude v1.51 (beta) released We have just released Declude v1.51 (beta). This includes another change to ensure that mailing list E-mails are not scanned, but instead sent out immediately. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Huge amount of Klez going around?
Just found it myself. Just goto www.declude.com and goto the Free Web Tools. It is out there. Not sure who built it, but appears to work well. We did not have our log level set to Mid, therefore can't see anything right now, but will be able to from now on. Nice Tool! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dustin Freeman Sent: Tuesday, April 23, 2002 3:34 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.Virus] Huge amount of Klez going around? is this part of Declude? if so how did you run that report that would be great for us! I work for an ISP around 3900 customers. I have been looking for some sort of totals for the viruses that come throuhg here Thanks Dustin -Original Message- From: Paul Ingram [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 4:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Huge amount of Klez going around? I just ran VirusLog Analyzer this is what I have gotten today. We have around 300 users that's it. I looked at the last 7 days and each has been pretty heavy. Scott you are DMAN! Thanks for a great product Count= 72 Virus Name= the W32/Klez.h@MM virus !!! Count= 50 Virus Name= W32/Klez.H@mm Count= 21 Virus Name= the W32/Klez.gen@MM virus !!! Count= 2Virus Name= the W32/Magistr.b@MM virus !!! Count= 2Virus Name= W32/Magistr.32768@mm Count= 1Virus Name= W32/Klez.E@mm Count= 1Virus Name= the W32/Klez.e@MM virus !!! Count= 1Virus Name= the W32/Magistr.a@MM virus !!! Count= 1Virus Name= W32/Magistr.28672@mm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Grant Griffith Sent: Tuesday, April 23, 2002 3:38 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Huge amount of Klez going around? Anyone been seeing a huge amount of the Klez virus messages going around? We are a fairly small hosting company and we have had over 100 today. Usually just see around half dozen viruses a day. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus/McAfee] --- [This E-mail scanned for viruses by Declude Virus/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Virus sent to one user allot
We don't send a message to the recipient, therefore don't have this problem. We just send a notification to the sender, which I know sometimes is spoofed, but have not had time to implement the newer features yet. :) Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram Sent: Tuesday, April 23, 2002 3:15 PM To: Declude. Virus Subject: [Declude.Virus] Virus sent to one user alot I have one user who has been sent a virus about 15 times today she is getting tired of the auto coming to her. What would be the best solution be. Ban the incoming IP with Imail rules? Oh the other postmaster for the address is not responding. It is the KLEZ.H so I know it is spoofing the Address so I can't really blame him. Can I? ~Paul~ --- [This E-mail scanned for viruses by Declude Virus/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Huge amount of Klez going around?
Anyone been seeing a huge amount of the Klez virus messages going around? We are a fairly small hosting company and we have had over 100 today. Usually just see around half dozen viruses a day. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Bounced Message?
Hello All, I am looking for a standard bounce message that contains some good information for the person that sent a virus around. If anyone would be willing to share theirs, I would greatly appreciate it. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Getting new Definitions?
Hello All, Where does everyone connect to get the latest definition files for the DOS version of F-Prot? Just realized I had not got any updates for a week due to ftp2.complex.is no longer being available. I have a script that does this nightly, but which ftp location is the best to use? Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] MISSING_REVERSE_DNS:Imail/declude log parser...
I think the domain.exe is available on Declude's website. www.declude.com it is under Web Tools or something like that I believe. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham ||Sent: Thursday, December 06, 2001 5:57 PM ||To: [EMAIL PROTECTED] ||Subject: Re: [Declude.Virus] MISSING_REVERSE_DNS:Imail/declude log ||parser... || || ||thanks ||I can't find domain.exe, there is a domlist.exe, but no domain.exe ||can someone please post a download link. || ||also, I have vir.log files in a separate directory (not the spool ||directory), should I change anything in the batch ? || || || ||- Original Message - ||From: "Jeff Pitoniak" <[EMAIL PROTECTED]> ||To: <[EMAIL PROTECTED]> ||Sent: Thursday, December 06, 2001 10:15 PM ||Subject: RE: [Declude.Virus] MISSING_REVERSE_DNS:Imail/declude ||log parser... || || ||> ||> Put this usage.cmd in c:\tools (or modify paths in the scipt to match ||where ||> you put it) ||> ||> Put domain.exe in the Imail spool directory. (available on the Imail ||website ||> under free tools) ||> ||> Create a d:\logs directory for these usage logs or create your own and ||> update the "log" variable in usage.cmd ||> ||> And finally, I installed Imail on the D:\ drive so make sure your paths ||> match the script file's. ||> ||> Make sure that the "Task Scheduler" is set to automatic in the services ||> control panel and paste this ito a command prompt to automate usage.cmd. ||> ||> AT 02:30 /EVERY:M,T,W,Th,F,S,Su "c:\winnt\system32\cmd.exe /c ||> c:\tools\usage.cmd" ||> ||> (note: if you put usage.cmd somewhere else chang the AT command above to ||> reflect this) ||> ||> Good luck. ||> ||> Best regards, ||> Jeff ||> -- ||> "If your only tool is a hammer, pretty soon everything starts ||to look like ||a ||> nail."-Dr. William Learner, Chiropractor ||> Jeff Pitoniak - Network Administration & Security Consultant - PCE ||Systems, ||> Inc. ||> email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ||> Ph:(248)223-4888 ext.138 Fax:(248)223-4889 ||> || ||--- ||[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
RE: [Declude.Virus] New W32/Goner-A virus
OK, got the updates there. Have to start checking ftp2.complex.is instead. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of Bill Beach ||Sent: Tuesday, December 04, 2001 2:51 PM ||To: [EMAIL PROTECTED] ||Subject: RE: [Declude.Virus] New W32/Goner-A virus || || ||I just got F-Prot defs with today's date from ftp2.complex.is. || ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram ||Sent: Tuesday, December 04, 2001 2:49 PM ||To: [EMAIL PROTECTED] ||Subject: RE: [Declude.Virus] New W32/Goner-A virus || || ||No F-Prot is not chaching it ..I have caught 68 since 2:15pm when a user ||called me to ask could the install this screen saver. I am caching by ||filtering the subject line and body text. I also tried Macfee and I didn't ||see an update for them yet either. || ||Paul || ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of Grant Griffith ||Sent: Tuesday, December 04, 2001 2:40 PM ||To: [EMAIL PROTECTED] ||Subject: RE: [Declude.Virus] New W32/Goner-A virus || ||I just downloaded the files from F-Prot and they are what we already had. ||F-Prot must either already catch it or has not updated the info yet. || ||Sincerely, ||Grant Griffith, Vice President ||EI8HT LEGS Web Management Co., Inc. ||http://www.getafreewebsite.com ||877-483-3393 || -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt Sent: Tuesday, December 04, 2001 2:39 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] New W32/Goner-A virus Yep - at least TWO client firms were infected this morning, spreading hundreds of new infections. Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, December 04, 2001 02:31 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New W32/Goner-A virus FYI, there is a new fast-spreading virus "W32/Goner-A" with an attachment "Gone.SCR". I would strongly recommend that everyone update their virus definitions immediately (even if you update daily, you might not want to wait for the next update). F-Prot, McAfee, Sophos and likely others have new definitions out that catch this one. -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . || ||This E-mail came from the Declude.Virus mailing list. To ||unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ||type "unsubscribe Declude.Virus". You can E-mail ||[EMAIL PROTECTED] for assistance. You can visit our web ||site at http://www.declude.com . || ||This E-mail came from the Declude.Virus mailing list. To ||unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ||type "unsubscribe Declude.Virus". You can E-mail ||[EMAIL PROTECTED] for assistance. You can visit our web ||site at http://www.declude.com . || || ||This E-mail came from the Declude.Virus mailing list. To ||unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ||type "unsubscribe Declude.Virus". You can E-mail ||[EMAIL PROTECTED] for assistance. You can visit our web ||site at http://www.declude.com . || This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] F-Prot
Where can I get the DOS virus scanner to use with Declude Virus? I just purchased this and need to get the scanner now. From what I recall it was like $20 or something like that. Thanks! Grant Griffith This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
