Re: [Declude.Virus] Prescaning the party
And if I don't have a prescan line, the default is on or off ? BTW, someone just sent me a copy, and fprot did not identify the virus correctly, notification said unknown virus. others said here they were correctly identifying the virus, what do you think the problem is over here ? Prescan default to on ? or some other issue ? Thanks - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 7:39 PM Subject: Re: [Declude.Virus] Prescaning the party I don't think I ever used the prescan, but just to make sure, how do you turn it off ? You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg file). manual.html does not mention prescan Thanks for pointing that out -- we're putting a list of additions to make to the manual. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: DSN:Re: [Declude.Virus] Prescaning the party
Thank you all the new defs did the job correctly - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 10:08 PM Subject: DSN:Re: [Declude.Virus] Prescaning the party F-prot did not correctly identify the virus for us till we updated the def's at aprox 1:30pm est time today. These appear to be diffent def's than were available in the am though the file names and sizes are the same. Stu At 09:53 PM 01/29/2002 -, you wrote: And if I don't have a prescan line, the default is on or off ? BTW, someone just sent me a copy, and fprot did not identify the virus correctly, notification said unknown virus. others said here they were correctly identifying the virus, what do you think the problem is over here ? Prescan default to on ? or some other issue ? Thanks - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 7:39 PM Subject: Re: [Declude.Virus] Prescaning the party I don't think I ever used the prescan, but just to make sure, how do you turn it off ? You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg file). manual.html does not mention prescan Thanks for pointing that out -- we're putting a list of additions to make to the manual. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . -- --- CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com -- --- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] FPROT
I also knew of one windows version but when I tried to download 3.11b yesterday, I was presented with two choices: fp-win_311b_m.exe - This is the multi-user version of F-Prot Antivirus for Windows (size: 6331904 bytes, dated: Fri Jan 18 10:44:23 2002) fp-win_311b_s.exe - This is the single user version of F-Prot Antivirus for Windows (size: 6331904 bytes, dated: Fri Jan 18 10:44:23 2002) Anyone knows the difference ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 17, 2002 8:55 PM Subject: Re: [Declude.Virus] FPROT What is the difference between the multi-user and the single user Fprot for windows ? The last I checked, there was only one version of F-Prot for Windows, and it required a minimum 20 user license (at $2/year per user). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] FPROT
What is the difference between the multi-user and the single user Fprot for windows ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Magistr.32678
1-If I set netshield to scan \spool, it will not interfere with declude ? the recieved files/emails are directly created in subdirectories, and declude will scan and send notification before netshield delete the files? 2- We can set netshield to scan \spool but not its subdirectories ? how ? 3- is it a good idea to do have netshield monitor \spool, do you recommend it ? (I curently have netshield monitoring the server but exclude \spool) 4- How do I find what version of Fprot dos engine I have ? I already contacted their support 3 times, but never got an answer, even about the 3.11b problem. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, January 12, 2002 12:46 AM Subject: Re: [Declude.Virus] Magistr.32678 BTW - I thought you couldn't have an on-access scanner running on the machine with Declude and the command line scanner. To make Declude work we had to uninstall F-prot and reinstall it without the on-access option. Here's the story about on-access scanners and Declude: As you probably know, Declude works with a command line scanner. If you run an on-access scanner, it will delete files as soon as Declude creates them (if they contain a virus). When Declude calls the command line scanner, the command line scanner reports that no virus was found (since the file was deleted, so was the virus). That's why running an on-access scanner can be a problem. However, you can either set up the on-access scanner not to scan the subdirectories off of \IMail\Spool (where Declude processes the attachments), or you can change the ONACCESS OFF line in the \IMail\Declude\virus.cfg file to ONACCESS ON, which will tell Declude to check to see if the file was deleted (and if so, assume a virus was found). The problem with F-Prot is that it can't be set up to exclude the subdirectories off of \IMail\spool, and their on-access scanner conflicts with Declude. You *can* set it up using the ONACCESS ON setting, but there's a chance that it will interfere. I don't recall exactly what happens, but essentially there's a chance that either viruses could occasionally be delivered, or non-viruses could get caught. I believe it's a file locking issue. The Windows version of F-Prot is fairly new, from what I understand, so this may change as the program evolves. So what can you do? You can have F-Prot's command line scanner hooked up to Declude, while having another product (such as McAfee) scanning the \IMail\spool directory. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Fprot
Did anyone find an updated bug free 3.11b ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] f-prot 3.11b
I also tried everything, nothing seems to work I wrote tech support last friday, still waiting for an answer Fortunatly, I have netshield protecting the server (exept the spool directory), I only use Fprot for declude. But I don't like the idea of having a problem with any software installed on my server I will let you know if I get a response from frisk please do the same - Original Message - From: David Dodell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 24, 2001 3:52 PM Subject: [Declude.Virus] f-prot 3.11b I just redownloaded 3.11b, reinstalled it, rebooted etc ... and still can't run the OnDemand Scanner ... f-prot with declude still appears to be working ok ... still no answer from F-Prot tech support. David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)
Hi Jerry How do we find out what fprot engine is running (for dos)? is there a command line switch to show the version ? thanks - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 7:14 PM Subject: [Declude.Virus] Fw: New version of F-PROT (3.11b) FYI, for those that don't auto-update the engine via FTP: I don't think all the mirrors are updated yet. Jerry - Original Message - From: fp-admin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 11:24 AM Subject: New version of F-PROT (3.11b) This is a short, automatically generated message, to let you know that a new version of F-PROT Antivirus for DOS, has been made available. That version is: 3.11b This version should be available on ftp sites soon and if possible, please use ftp sites nearer to you netwise than the mail-server located at f-prot.com. (Please replace the XXX below with the proper version number.) Please see also http://www.f-prot.com/f-prot/obtaining.html for pointers. For example: ftp://ftp.f-prot.com/pub/fp-XXX.zip For further help about the mail-server, send a message to [EMAIL PROTECTED] containing the following in the body: send help You will then receive a text about the mail-server and the available commands. If you would like to contact a human being for further questions or for more information, just send email to: [EMAIL PROTECTED] -- -- For your convenience, the PGP signature for the zip file follows: (It is the same as the output from 'finger [EMAIL PROTECTED]') -BEGIN PGP MESSAGE- Version: 2.6.2i iQCVAwUAPCIJGuh8c/eece0pAQEGGwQA0CsIaAzhS/251uhm613uqZAQ8GWRTQBJ BIZWA/5Mm90DRxqpXUGcMUXInol48AFqXR0kZ6Y9GfxaV9f0JBHPyi1fWQnJ03d7 OQK3E3OzCZcEcjn4PU9yg4XjxqJ065AtQn93BbZm9x4Ie5w3++SeuisGOziN+TRw j//VcON7AGI= =Q25f -END PGP MESSAGE- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)
I dowloaded and installed 3.11b fprot dos declude are ok, but i cant run fprot windows anymore get the message can't run more than one instance of the program I am not running any instance. Anyone tried 3.11b and made it work ? - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 7:35 PM Subject: Re: [Declude.Virus] Fw: New version of F-PROT (3.11b) Hi Jerry How do we find out what fprot engine is running (for dos)? is there a command line switch to show the version ? thanks - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 7:14 PM Subject: [Declude.Virus] Fw: New version of F-PROT (3.11b) FYI, for those that don't auto-update the engine via FTP: I don't think all the mirrors are updated yet. Jerry - Original Message - From: fp-admin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 11:24 AM Subject: New version of F-PROT (3.11b) This is a short, automatically generated message, to let you know that a new version of F-PROT Antivirus for DOS, has been made available. That version is: 3.11b This version should be available on ftp sites soon and if possible, please use ftp sites nearer to you netwise than the mail-server located at f-prot.com. (Please replace the XXX below with the proper version number.) Please see also http://www.f-prot.com/f-prot/obtaining.html for pointers. For example: ftp://ftp.f-prot.com/pub/fp-XXX.zip For further help about the mail-server, send a message to [EMAIL PROTECTED] containing the following in the body: send help You will then receive a text about the mail-server and the available commands. If you would like to contact a human being for further questions or for more information, just send email to: [EMAIL PROTECTED] -- -- For your convenience, the PGP signature for the zip file follows: (It is the same as the output from 'finger [EMAIL PROTECTED]') -BEGIN PGP MESSAGE- Version: 2.6.2i iQCVAwUAPCIJGuh8c/eece0pAQEGGwQA0CsIaAzhS/251uhm613uqZAQ8GWRTQBJ BIZWA/5Mm90DRxqpXUGcMUXInol48AFqXR0kZ6Y9GfxaV9f0JBHPyi1fWQnJ03d7 OQK3E3OzCZcEcjn4PU9yg4XjxqJ065AtQn93BbZm9x4Ie5w3++SeuisGOziN+TRw j//VcON7AGI= =Q25f -END PGP MESSAGE- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Multiple Scanner Support - Pricing
That would have been true if everyone had to pay for a new feature. but the fact that the pro version get the new feature free, and the standard version do not is not right. If everybody had to pay for it, or if there was some type of support contract, I would be the first one to accept. But this is a sort of descrimination against the chipies :) When I bought the product, there was nothing that said that the pro version will get additional features in the future for free. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 6:35 PM Subject: RE: [Declude.Virus] Multiple Scanner Support - Pricing Hm, I feel just the opposite. I feel guilty about getting top support, a great tools web-site and an ever-expanding product and NOT paying an annual upgrade fee to pay for all that development effort. So - my vote is: New features CAN cost more if that's commercially necessary. If a new feature is used only by a small subset of clients, then I feel it can be 'banned' into the Pro version. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Tuesday, December 18, 2001 01:28 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Declude v1.30 released (beta) o PRO version adds internal support for multiple virus scanners. Com'on, the main feature of pro version is multi-domain support, support for multiple scanner should be available for everybody ! - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 6:11 PM Subject: [Declude.Virus] Declude v1.30 released (beta) Computerized Horizons has just released Declude Virus v1.30. Notable changes include: o Major overhaul to MIME decoding functions to support further enhancements o Declude's dependency on user32.dll was removed, which (should) prevent Declude from counting towards the depletion of Microsoft's Mystery Heap. o DELIVERERRORS ON config option will allow E-mail that a scanner reports an error on to be delivered (if neither a Virus free or Virus found code is returned). o TEMPDIR config option to let you choose the temporary directory that Declude scans files in (to allow usage with on-access scanners that can't exclude subdirectories, and for RAM disk support) o Will automatically detect F-Prot.PIF file and delete it if necessary, to prevent halt of E-mail delivery. o PRO version adds internal support for multiple virus scanners. Also, the size of the Declude.exe has been shrunk to about 1/2 of its original size, so don't be alarmed if it appears small. The beta can be downloaded from http://www.declude.com/junkmail/support/ip4r.htm . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] TempDir
have a huge ramdisk... ?!?! How big is big enough ? 10M ? 50M? 100M ? Anyone already using a ramdrive with Imail and/or declude please share your experience - Original Message - From: Jim Jones, Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 9:13 PM Subject: Re: [Declude.Virus] TempDir - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 3:10 PM Subject: Re: [Declude.Virus] TempDir and how to make sure not to run out of free space on the ram disk ? - Original Message - From: Jim Jones, Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 9:04 PM Subject: Re: [Declude.Virus] TempDir I bet that it really speeds things up to do the scanning in a ram disk... anyone know for sure and if so, how do you set up a ram disk in windows 2000 server? thanks jim - Original Message - From: Don Brown [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 2:57 PM Subject: [Declude.Virus] TempDir Scott, What is the advantage, if any, of specifying a Temporary directory for AV to scan files? They're are scanned in the spool directory by default, aren't they? Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED]http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] MISSING_REVERSE_DNS:Neshield
Hi, I exluded all imail directories (spool, domaines, users, ...) and the subdirectories from netshield scanning, but it is still trying to scan the spool (see below). Anyone run into this problem before ? please help ! 12/10/01 06:32 Cleaned AUTORITE NT\SYSTEM E:\imailsrvr\Spool\D8e81268.vir\0.bat W32/Magistr.b@MM 12/10/01 07:11 Deleted AUTORITE NT\SYSTEM E:\imailsrvr\Spool\D978a166.vir\0.htm VBS/Tam@M This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] v1.27 (beta) released
Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Yes, Yes, Yes :)) - Original Message - From: Craig Gittens [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:40 PM Subject: RE: [Declude.Virus] v1.27 (beta) released Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Craig -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, October 11, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] v1.27 (beta) released We have just released Declude Virus v1.27. The main change is that it adds the ability to pre-scan HTML files (for Declude Virus Pro). When you add PRESCAN ON to the \IMail\Declude\virus.cfg file (for the Pro version only), Declude Virus will pre-scan HTML files. E-mail with HTML (but no other attachments or non-text MIME segments) files typically account for about 80% to 90% of E-mail traffic, but rarely contain viruses. They still need to be scanned, because there are some HTML viruses (such as Kak.worm). Scanning all this extra traffic (thanks to Microsoft, for pushing HTML even when it isn't needed) uses lots of CPU time. With th This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] McAfee NetShield Upgrade
thanks just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both said I have the latest engine and dat files the about netshield has: Netshield for windows NT and W 2000 4.5 Virus def 4.0.4165 Scan engine 4.0.70 What is going on ? how can I get the new engines ? I just got my CD last week ? - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:23 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:22 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Hi jerry, few questions if you have the time: 1- I keep getting this type of alert from netshield: The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken too long to complete and is being canceled. Scan engine version used is 4.0.70 DAT version 4.0.4164. How can avoid this, is there a timeout or a time limit I can change ? 2- I am playing with ME (management edition), I downloaded and saved latest DAT with netshield, and used it to updated other machienes with netshield, but could not use it on machines with Viruscan, it gives a message that it could not get update.ini any idea what to do ? 3- can/should we use sdat with ME ? TIA - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 7:10 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Yes. - Original Message - From: Charles Stanley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:06 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade At 12:03 PM 10/11/01, you wrote: If you just mean the engine, download and run the latest SDAT.exe. This will update the engine for the server version of Netshield? This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] McAfee NetShield Upgrade
upgraded to engine 4.1.5, but still getting the timout alerts do you know what are these ? The scan of E:\McAfee\SecureCast\ESC_55SP2.zip\ESC_55SP2.EXE has taken too long to complete and is being canceled. Scan engine version used is 4.1.50 DAT version 4.0.4165 - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 10:04 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 4100 is over a year old. Get the latest 4165 from the mcafee site. Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 4:57 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade thanks just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both said I have the latest engine and dat files the about netshield has: Netshield for windows NT and W 2000 4.5 Virus def 4.0.4165 Scan engine 4.0.70 What is going on ? how can I get the new engines ? I just got my CD last week ? - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:23 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't worthless, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:22 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Hi jerry, few questions if you have the time: 1- I keep getting this type of alert from netshield: The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken too long to complete and is being canceled. Scan engine version used is 4.0.70 DAT version 4.0.4164. How can avoid this, is there a timeout or a time limit I can change ? 2- I am playing with ME (management edition), I downloaded and saved latest DAT with netshield, and used it to updated other machienes with netshield, but could not use it on machines with Viruscan, it gives a message that it could not get update.ini any idea what to do ? 3- can/should we use sdat with ME ? TIA - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 7:10 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade Yes. - Original Message - From: Charles Stanley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 3:06 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade At 12:03 PM 10/11/01, you wrote: If you just mean the engine, download and run the latest SDAT.exe. This will update the engine for the server version of Netshield? This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED
Re: [Declude.Virus] Magstr.39921
Hi Sharyn, What av are you using with Declude ? - Original Message - From: Sharyn Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 3:41 PM Subject: RE: [Declude.Virus] Magstr.39921 The Declude installed on my mail server nabbed this :) Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Spangenberg Sent: Monday, October 08, 2001 11:37 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Magstr.39921 I received this message with several attached files, .mbx .srt .iud. So either they aren't infected, or Fprot also let them through here. Anyone else? Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Monday, October 08, 2001 9:22 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Magstr.39921 Attached is the Imail Mailbox with a virus tha got thru today Declude+fprot Please check and let us know Thanks - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 1:17 PM Subject: Re: [Declude.Virus] Declude Confirm for sending email to lists? Ideally on large lists the sender should have to send the message, receive a confirmation request, and then send a confirming message, in the same style as a Declude Confirm used for subscription. That way a forged message can't get distributed as if it were legitimate. Any solutions? Could Declude Confirm be configured or extended to take this role? I don't think this could be done with Declude Confirm, nor do I know of any other way to accomplish it. This is something we may consider adding to Declude Confirm. One option in the meantime would be to use passwords (depending on the type of list, that may or may not be convenient). -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged Best Tequila four years running by the Wine Enthusiast magazine. For more information, please click (go to) htmla href=http://www.cruzanrums.com;http:///aa href=http://www.cruzanrums;www.cruzanrums.com/a/html This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Magstr.39921
stop shouting please it is important for all of us to understand what is going on. Beside, I did state the attachement contain a virus, and all you need to do is not open it, I hope for your sake you know that, If you don't know that, you probably don't belong on this list. - Original Message - From: Ken Lizotte [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 3:41 PM Subject: Re: [Declude.Virus] Magstr.39921 NOT A VERY NICE THING TO DO. SEND A VIRUS TO THE WHOLE LIST! PLEASE GET A NEW LIFE, THANK YOU. Ken - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 11:21 AM Subject: [Declude.Virus] Magstr.39921 Attached is the Imail Mailbox with a virus tha got thru today Declude+fprot Please check and let us know Thanks - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 1:17 PM Subject: Re: [Declude.Virus] Declude Confirm for sending email to lists? Ideally on large lists the sender should have to send the message, receive a confirmation request, and then send a confirming message, in the same style as a Declude Confirm used for subscription. That way a forged message can't get distributed as if it were legitimate. Any solutions? Could Declude Confirm be configured or extended to take this role? I don't think this could be done with Declude Confirm, nor do I know of any other way to accomplish it. This is something we may consider adding to Declude Confirm. One option in the meantime would be to use passwords (depending on the type of list, that may or may not be convenient). -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] External filter program
Hi, When using declude, can we still use an externel filter program as in http://support.ipswitch.com/kb/IM-2517-DM01.htm ??? thanks This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] a virus went thru !
hi, Declude + Fprot is a wonderful couple, catching hundred of viruses daily . But I just received an email infected with the W32.Magistr.39921@mm virus (caught localy by norton). I checked some declude logs, never found this virus Can it be a Fprot problem ? or can declude under heavy trafic let a virus thru from time to time ? How can I verify ? thanks This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .