Re: [Declude.Virus] Prescaning the party

2002-01-29 Thread Serge Dergham

And if I don't have a prescan line, the default is on or off ?

BTW, someone just sent me a copy, and fprot did not identify the virus
correctly, notification said unknown virus.
others said here they were correctly identifying the virus, what do you
think the problem is over here ?
Prescan default to on ? or some other issue ?

Thanks


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, January 29, 2002 7:39 PM
Subject: Re: [Declude.Virus] Prescaning the party



 I don't think I ever used the prescan, but just to make sure, how do you
 turn it off ?

 You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg
 file).

 manual.html does not mention prescan

 Thanks for pointing that out -- we're putting a list of additions to make
 to the manual.
-Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: DSN:Re: [Declude.Virus] Prescaning the party

2002-01-29 Thread Serge Dergham

Thank you all
the new defs did the job correctly



- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, January 29, 2002 10:08 PM
Subject: DSN:Re: [Declude.Virus] Prescaning the party


 F-prot did not correctly identify the virus for us till we updated the
def's at
 aprox 1:30pm est time today. These appear to be diffent def's than were
 available in the am though the file names and sizes are the same.

 Stu


 At 09:53 PM 01/29/2002 -, you wrote:
 And if I don't have a prescan line, the default is on or off ?
 
 BTW, someone just sent me a copy, and fprot did not identify the virus
 correctly, notification said unknown virus.
 others said here they were correctly identifying the virus, what do you
 think the problem is over here ?
 Prescan default to on ? or some other issue ?
 
 Thanks
 
 
 - Original Message -
 From: R. Scott Perry [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, January 29, 2002 7:39 PM
 Subject: Re: [Declude.Virus] Prescaning the party
 
 
 
  I don't think I ever used the prescan, but just to make sure, how do
you
  turn it off ?
 
  You would just change the PRESCAN ON line to PRESCAN OFF (in the
virus.cfg
  file).
 
  manual.html does not mention prescan
 
  Thanks for pointing that out -- we're putting a list of additions to
make
  to the manual.
 -Scott
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .
 
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 
 
 --
---
 CSOnline Technical Support hours - Monday thru Saturday 7am - 1am
 CSOnline Technical Support Numbers Seneca814-677-2447
Clarion   814-227-3638
Meadville 814-425-1696
Parker724-399-1158
 http://www.csonline.net  http://www.cshowcase.com
http://www.learncenter.com
 --
---

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] FPROT

2002-01-18 Thread Serge Dergham

I also knew of one windows version
but when I tried to download 3.11b yesterday, I was presented with two
choices:

fp-win_311b_m.exe - This is the multi-user version of F-Prot Antivirus for
Windows
(size: 6331904 bytes, dated: Fri Jan 18 10:44:23 2002)

fp-win_311b_s.exe - This is the single user version of F-Prot Antivirus for
Windows
(size: 6331904 bytes, dated: Fri Jan 18 10:44:23 2002)

Anyone knows the difference ?


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, January 17, 2002 8:55 PM
Subject: Re: [Declude.Virus] FPROT



 What is the difference between the multi-user and the single user Fprot
for
 windows ?

 The last I checked, there was only one version of F-Prot for Windows, and
 it required a minimum 20 user license (at $2/year per user).
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] FPROT

2002-01-17 Thread Serge Dergham

What is the difference between the multi-user and the single user Fprot for
windows ?

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Magistr.32678

2002-01-11 Thread Serge Dergham

1-If I set netshield to scan \spool, it will not interfere with declude ?
the recieved files/emails are directly created in subdirectories, and
declude will scan and send notification before netshield delete the files?

2- We can set netshield to scan \spool but not its subdirectories ? how ?

3- is it a good idea to do have netshield monitor \spool, do you recommend
it ? (I curently have netshield monitoring the server but exclude \spool)

4- How do I find what version of Fprot dos engine I have ? I already
contacted their support 3 times, but never got an answer, even about the
3.11b problem.

- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, January 12, 2002 12:46 AM
Subject: Re: [Declude.Virus] Magistr.32678



 BTW - I thought you couldn't have an on-access scanner running on the
 machine with Declude and the command line scanner.  To make Declude work
we
 had to uninstall F-prot and reinstall it without the on-access option.

 Here's the story about on-access scanners and Declude:

 As you probably know, Declude works with a command line scanner.

 If you run an on-access scanner, it will delete files as soon as Declude
 creates them (if they contain a virus).  When Declude calls the command
 line scanner, the command line scanner reports that no virus was found
 (since the file was deleted, so was the virus).  That's why running an
 on-access scanner can be a problem.  However, you can either set up the
 on-access scanner not to scan the subdirectories off of \IMail\Spool
(where
 Declude processes the attachments), or you can change the ONACCESS OFF
 line in the \IMail\Declude\virus.cfg file to ONACCESS ON, which will
tell
 Declude to check to see if the file was deleted (and if so, assume a virus
 was found).

 The problem with F-Prot is that it can't be set up to exclude the
 subdirectories off of \IMail\spool, and their on-access scanner conflicts
 with Declude.  You *can* set it up using the ONACCESS ON setting, but
 there's a chance that it will interfere.  I don't recall exactly what
 happens, but essentially there's a chance that either viruses could
 occasionally be delivered, or non-viruses could get caught.  I believe
it's
 a file locking issue.  The Windows version of F-Prot is fairly new, from
 what I understand, so this may change as the program evolves.

 So what can you do?  You can have F-Prot's command line scanner hooked up
 to Declude, while having another product (such as McAfee) scanning the
 \IMail\spool directory.
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] Fprot

2002-01-07 Thread Serge Dergham

Did anyone find an updated bug free 3.11b ?

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] f-prot 3.11b

2001-12-24 Thread Serge Dergham

I also tried everything, nothing seems to work
I wrote tech support last friday, still waiting for an answer
Fortunatly, I have netshield protecting the server (exept the spool
directory), I only use Fprot for declude.
But I don't like the idea of having a problem with any software installed on
my server
I will let you know if I get a response from frisk
please do the same


- Original Message -
From: David Dodell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 24, 2001 3:52 PM
Subject: [Declude.Virus] f-prot 3.11b


 I just redownloaded 3.11b, reinstalled it, rebooted etc ... and still
 can't run the OnDemand Scanner ... f-prot with declude still appears
 to be working ok ... still no answer from F-Prot tech support.

 David

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)

2001-12-21 Thread Serge Dergham

Hi Jerry

How do we find out what fprot engine is running (for dos)? is there a
command line switch to show the version ?

thanks

- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, December 21, 2001 7:14 PM
Subject: [Declude.Virus] Fw: New version of F-PROT (3.11b)


 FYI, for those that don't auto-update the engine via FTP:

 I don't think all the mirrors are updated yet.

 Jerry

 - Original Message -
 From: fp-admin [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, December 21, 2001 11:24 AM
 Subject: New version of F-PROT (3.11b)


 
 
 
  This is a short, automatically generated message, to let you know that a
new
  version of F-PROT Antivirus for DOS, has been made available.
  That version is: 3.11b
  This version should be available on ftp sites soon and if possible,
please
  use ftp sites nearer to you netwise than the mail-server located at
 f-prot.com.
  (Please replace the XXX below with the proper version number.)
 
  Please see also http://www.f-prot.com/f-prot/obtaining.html for
  pointers.
 
  For example:
  ftp://ftp.f-prot.com/pub/fp-XXX.zip
 
 
  For further help about the mail-server, send a message to
  [EMAIL PROTECTED] containing the following in the body:
  send help
  You will then receive a text about the mail-server and the available
 commands.
 
 
  If you would like to contact a human being for further questions or for
more
  information, just send email to:
 [EMAIL PROTECTED]
 
 

 --
--
 
 
  For your convenience, the PGP signature for the zip file follows:
  (It is the same as the output from 'finger [EMAIL PROTECTED]')
 
  -BEGIN PGP MESSAGE-
  Version: 2.6.2i
 
  iQCVAwUAPCIJGuh8c/eece0pAQEGGwQA0CsIaAzhS/251uhm613uqZAQ8GWRTQBJ
  BIZWA/5Mm90DRxqpXUGcMUXInol48AFqXR0kZ6Y9GfxaV9f0JBHPyi1fWQnJ03d7
  OQK3E3OzCZcEcjn4PU9yg4XjxqJ065AtQn93BbZm9x4Ie5w3++SeuisGOziN+TRw
  j//VcON7AGI=
  =Q25f
  -END PGP MESSAGE-
 
 
 


 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)

2001-12-21 Thread Serge Dergham

I dowloaded and installed 3.11b
fprot dos  declude are ok, but i cant run fprot windows anymore
get the message can't run more than one instance of the program
I am not running any instance.

Anyone tried 3.11b and made it work ?

- Original Message -
From: Serge Dergham [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, December 21, 2001 7:35 PM
Subject: Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)


 Hi Jerry

 How do we find out what fprot engine is running (for dos)? is there a
 command line switch to show the version ?

 thanks

 - Original Message -
 From: Jerry Murdock [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, December 21, 2001 7:14 PM
 Subject: [Declude.Virus] Fw: New version of F-PROT (3.11b)


  FYI, for those that don't auto-update the engine via FTP:
 
  I don't think all the mirrors are updated yet.
 
  Jerry
 
  - Original Message -
  From: fp-admin [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, December 21, 2001 11:24 AM
  Subject: New version of F-PROT (3.11b)
 
 
  
  
  
   This is a short, automatically generated message, to let you know that
a
 new
   version of F-PROT Antivirus for DOS, has been made available.
   That version is: 3.11b
   This version should be available on ftp sites soon and if possible,
 please
   use ftp sites nearer to you netwise than the mail-server located at
  f-prot.com.
   (Please replace the XXX below with the proper version number.)
  
   Please see also http://www.f-prot.com/f-prot/obtaining.html for
   pointers.
  
   For example:
   ftp://ftp.f-prot.com/pub/fp-XXX.zip
  
  
   For further help about the mail-server, send a message to
   [EMAIL PROTECTED] containing the following in the body:
   send help
   You will then receive a text about the mail-server and the available
  commands.
  
  
   If you would like to contact a human being for further questions or
for
 more
   information, just send email to:
  [EMAIL PROTECTED]
  
  
 

 --
 --
  
  
   For your convenience, the PGP signature for the zip file follows:
   (It is the same as the output from 'finger [EMAIL PROTECTED]')
  
   -BEGIN PGP MESSAGE-
   Version: 2.6.2i
  
   iQCVAwUAPCIJGuh8c/eece0pAQEGGwQA0CsIaAzhS/251uhm613uqZAQ8GWRTQBJ
   BIZWA/5Mm90DRxqpXUGcMUXInol48AFqXR0kZ6Y9GfxaV9f0JBHPyi1fWQnJ03d7
   OQK3E3OzCZcEcjn4PU9yg4XjxqJ065AtQn93BbZm9x4Ie5w3++SeuisGOziN+TRw
   j//VcON7AGI=
   =Q25f
   -END PGP MESSAGE-
  
  
  
 
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .
 
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Multiple Scanner Support - Pricing

2001-12-18 Thread Serge Dergham

That would have been true if everyone had to pay for a new feature.
but the fact that the pro version get the new feature free, and the standard
version do not is not right.
If everybody had to pay for it, or if there was some type of support
contract, I would be the first one to accept.
But this is a sort of descrimination against the chipies :)
When I bought the product, there was nothing that said that the pro version
will get additional features in the future for free.


- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 18, 2001 6:35 PM
Subject: RE: [Declude.Virus] Multiple Scanner Support - Pricing


 Hm, I feel just the opposite. I feel guilty about getting top support, a
 great tools web-site and an ever-expanding product and NOT paying an
annual
 upgrade fee to pay for all that development effort.

 So - my vote is: New features CAN cost more if that's commercially
 necessary. If a new feature is used only by a small subset of clients,
then
 I feel it can be 'banned' into the Pro version.

 Best Regards
 Andy Schmidt

 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
 Sent: Tuesday, December 18, 2001 01:28 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.Virus] Declude v1.30 released (beta)



  o PRO version adds internal support for multiple virus scanners.

 Com'on, the main feature of pro version is multi-domain support,
 support for multiple scanner should be available for everybody !


 - Original Message -
 From: R. Scott Perry [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, December 18, 2001 6:11 PM
 Subject: [Declude.Virus] Declude v1.30 released (beta)


  Computerized Horizons has just released Declude Virus v1.30.  Notable
  changes include:
 
  o Major overhaul to MIME decoding functions to support further
 enhancements
  o Declude's dependency on user32.dll was removed, which (should) prevent
  Declude from counting towards the depletion of Microsoft's Mystery Heap.
  o DELIVERERRORS ON config option will allow E-mail that a scanner
reports
  an error on to be delivered (if neither a Virus free or Virus found
  code is returned).
  o TEMPDIR config option to let you choose the temporary directory that
  Declude scans files in (to allow usage with on-access scanners that
can't
  exclude subdirectories, and for RAM disk support)
  o Will automatically detect F-Prot.PIF file and delete it if necessary,
to
  prevent halt of E-mail delivery.
  o PRO version adds internal support for multiple virus scanners.
 
  Also, the size of the Declude.exe has been shrunk to about 1/2 of its
  original size, so don't be alarmed if it appears small.  The beta can be
  downloaded from http://www.declude.com/junkmail/support/ip4r.htm .
   -Scott
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .
 
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] TempDir

2001-12-18 Thread Serge Dergham

 have a huge ramdisk... ?!?!

How big is big enough ?
10M ? 50M? 100M ?
Anyone already using a ramdrive with Imail and/or declude please share your
experience

- Original Message -
From: Jim Jones, Jr. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 18, 2001 9:13 PM
Subject: Re: [Declude.Virus] TempDir



 - Original Message -
 From: Serge Dergham [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, December 18, 2001 3:10 PM
 Subject: Re: [Declude.Virus] TempDir


  and how to make sure not to run out of free space on the ram disk ?
 
 
  - Original Message -
  From: Jim Jones, Jr. [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, December 18, 2001 9:04 PM
  Subject: Re: [Declude.Virus] TempDir
 
 
   I bet that it really speeds things up to do the scanning in a ram
 disk...
   anyone know for sure and if so, how do you set up a ram disk in
windows
  2000
   server?
  
   thanks
   jim
   - Original Message -
   From: Don Brown [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Sent: Tuesday, December 18, 2001 2:57 PM
   Subject: [Declude.Virus] TempDir
  
  
Scott,
   
What is the advantage, if any, of specifying a Temporary directory
for
  AV
to scan files?  They're are scanned in the spool directory by
default,
aren't they?
   
Thanks,
   

Don Brown - Dallas, Texas USA   Internet Concepts, Inc.
[EMAIL PROTECTED]http://www.inetconcepts.net
PGP Key ID: 04C99A55  (972) 788-2364  Fax: (972)
  788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate

   
---
[This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
   
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
   
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
  
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.  You can E-mail
   [EMAIL PROTECTED] for assistance.  You can visit our web
   site at http://www.declude.com .
  
  
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] MISSING_REVERSE_DNS:Neshield

2001-10-12 Thread Serge Dergham

Hi,
I exluded all imail directories (spool, domaines, users, ...) and the
subdirectories  from netshield scanning, but it is still trying to scan the
spool (see below).
Anyone run into this problem before ? please help !


12/10/01 06:32 Cleaned AUTORITE NT\SYSTEM
E:\imailsrvr\Spool\D8e81268.vir\0.bat W32/Magistr.b@MM
12/10/01 07:11 Deleted AUTORITE NT\SYSTEM
E:\imailsrvr\Spool\D978a166.vir\0.htm VBS/Tam@M



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] v1.27 (beta) released

2001-10-11 Thread Serge Dergham

 Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon
 please?

Yes, Yes, Yes :))

- Original Message -
From: Craig Gittens [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 8:40 PM
Subject: RE: [Declude.Virus] v1.27 (beta) released


 Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon
 please?

 Craig

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
 Sent: Thursday, October 11, 2001 3:14 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] v1.27 (beta) released


 We have just released Declude Virus v1.27.  The main change is that it
adds
 the ability to pre-scan HTML files (for Declude Virus Pro).

 When you add PRESCAN ON to the \IMail\Declude\virus.cfg file (for the
Pro
 version only), Declude Virus will pre-scan HTML files.  E-mail with HTML
 (but no other attachments or non-text MIME segments) files typically
 account for about 80% to 90% of E-mail traffic, but rarely contain
 viruses.  They still need to be scanned, because there are some HTML
 viruses (such as Kak.worm).  Scanning all this extra traffic (thanks to
 Microsoft, for pushing HTML even when it isn't needed) uses lots of CPU
 time.

 With th

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] McAfee NetShield Upgrade

2001-10-11 Thread Serge Dergham

thanks
just tried sdat4100.exe and 4100xdat.exe that came with the CD, they both
said I have the latest engine and dat files
the about netshield has:
Netshield for windows NT and W 2000 4.5
Virus def 4.0.4165
Scan engine 4.0.70

What is going on ? how can I get the new engines ?
I just got my CD last week ?



- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 8:23 PM
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade


 1: 4.0.70 must be 2-3 years old now.  Run SDAT ASAP, the scanner isn't
 worthless, but there are plenty of things that require the newer engines.

 2: I don't like ME much.  Haven't used it recently enough to help you.
I've
 moved almost all clients with a corporate desktop solution to Trend
 Officescan.

 3: See #2

 Jerry

 - Original Message -
 From: Serge Dergham [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, October 11, 2001 3:22 PM
 Subject: Re: [Declude.Virus] McAfee NetShield Upgrade


  Hi jerry,
 
  few questions if you have the time:
 
  1- I keep getting this type of alert from netshield:
  The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has taken
too
  long to complete and is being canceled.  Scan engine version used is
4.0.70
  DAT version 4.0.4164.
  How can avoid this, is there a timeout or a time limit I can change ?
 
  2- I am playing with ME (management edition), I downloaded and saved
latest
  DAT with netshield, and used it to updated other machienes with
netshield,
  but could not use it on machines with Viruscan, it gives a message that
it
  could not get update.ini
  any idea what to do ?
 
  3- can/should we use sdat with ME ?
 
  TIA
 
 
  - Original Message -
  From: Jerry Murdock [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Thursday, October 11, 2001 7:10 PM
  Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
 
 
   Yes.
  
   - Original Message -
   From: Charles Stanley [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Sent: Thursday, October 11, 2001 3:06 PM
   Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
  
  
At 12:03 PM 10/11/01, you wrote:
If you just mean the engine, download and run the latest
SDAT.exe.
   
This will update the engine for the server version of Netshield?
   
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
  
  
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.  You can E-mail
   [EMAIL PROTECTED] for assistance.  You can visit our web
   site at http://www.declude.com .
  
  
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .


 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] McAfee NetShield Upgrade

2001-10-11 Thread Serge Dergham

upgraded to engine 4.1.5, but still getting the timout alerts
do you know what are these ?

The scan of E:\McAfee\SecureCast\ESC_55SP2.zip\ESC_55SP2.EXE has taken too
long to complete and is being canceled.  Scan engine version used is 4.1.50
DAT version 4.0.4165

- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 10:04 PM
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade


 4100 is over a year old.  Get the latest 4165 from the mcafee site.

 Jerry

 - Original Message -
 From: Serge Dergham [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, October 11, 2001 4:57 PM
 Subject: Re: [Declude.Virus] McAfee NetShield Upgrade


  thanks
  just tried sdat4100.exe and 4100xdat.exe that came with the CD, they
both
  said I have the latest engine and dat files
  the about netshield has:
  Netshield for windows NT and W 2000 4.5
  Virus def 4.0.4165
  Scan engine 4.0.70
 
  What is going on ? how can I get the new engines ?
  I just got my CD last week ?
 
 
 
  - Original Message -
  From: Jerry Murdock [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Thursday, October 11, 2001 8:23 PM
  Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
 
 
   1: 4.0.70 must be 2-3 years old now.  Run SDAT ASAP, the scanner isn't
   worthless, but there are plenty of things that require the newer
engines.
  
   2: I don't like ME much.  Haven't used it recently enough to help you.
  I've
   moved almost all clients with a corporate desktop solution to Trend
   Officescan.
  
   3: See #2
  
   Jerry
  
   - Original Message -
   From: Serge Dergham [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Sent: Thursday, October 11, 2001 3:22 PM
   Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
  
  
Hi jerry,
   
few questions if you have the time:
   
1- I keep getting this type of alert from netshield:
The scan of F:\pcany\pcanywhere\Full.Cab\F1477_Aw32ban.dll has
taken
  too
long to complete and is being canceled.  Scan engine version used is
  4.0.70
DAT version 4.0.4164.
How can avoid this, is there a timeout or a time limit I can change
?
   
2- I am playing with ME (management edition), I downloaded and saved
  latest
DAT with netshield, and used it to updated other machienes with
  netshield,
but could not use it on machines with Viruscan, it gives a message
that
  it
could not get update.ini
any idea what to do ?
   
3- can/should we use sdat with ME ?
   
TIA
   
   
- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 7:10 PM
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
   
   
 Yes.

 - Original Message -
 From: Charles Stanley [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, October 11, 2001 3:06 PM
 Subject: Re: [Declude.Virus] McAfee NetShield Upgrade


  At 12:03 PM 10/11/01, you wrote:
  If you just mean the engine, download and run the latest
  SDAT.exe.
 
  This will update the engine for the server version of Netshield?
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .


 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .


   
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
  
  
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.  You can E-mail
   [EMAIL PROTECTED] for assistance.  You can visit our web
   site at http://www.declude.com .
  
  
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .


 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED

Re: [Declude.Virus] Magstr.39921

2001-10-08 Thread Serge Dergham

Hi Sharyn,

What av are you using with Declude ?



- Original Message -
From: Sharyn Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, October 08, 2001 3:41 PM
Subject: RE: [Declude.Virus] Magstr.39921


 The Declude installed on my mail server nabbed this :)

 Sharyn

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Spangenberg
 Sent: Monday, October 08, 2001 11:37 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] Magstr.39921


 I received this message with several attached files, .mbx .srt .iud. So
 either they aren't infected, or Fprot also let them through here.

 Anyone else?

 Dan

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
  Sent: Monday, October 08, 2001 9:22 AM
  To: [EMAIL PROTECTED]
  Subject: [Declude.Virus] Magstr.39921
 
 
  Attached is the Imail Mailbox with a virus tha got thru today
 
  Declude+fprot
 
  Please check and let us know
 
  Thanks
 
  - Original Message -
  From: R. Scott Perry [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Monday, October 08, 2001 1:17 PM
  Subject: Re: [Declude.Virus] Declude Confirm for sending email to
  lists?
 
 
  
   Ideally on large lists the sender should have to send the message,
   receive a confirmation request, and then send a confirming message,

   in the same style as a Declude Confirm used for subscription. That
   way a forged message can't get distributed as if it were
   legitimate.
   
   Any solutions? Could Declude Confirm be configured or extended to
   take this role?
  
   I don't think this could be done with Declude Confirm, nor do I know

   of
  any
   other way to accomplish it.  This is something we may consider
   adding to Declude Confirm.  One option in the meantime would be to
   use passwords (depending on the type of list, that may or may not be
 convenient).
   -Scott
  
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
   unsubscribe Declude.Virus.  You can E-mail [EMAIL PROTECTED]
   for assistance.  You can visit our web site at
   http://www.declude.com .
  
  
 

 This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.Virus.  You can E-mail [EMAIL PROTECTED] for assistance.
 You can visit our web site at http://www.declude.com .


 We are the worldwide producer and marketer of the award winning Cruzan
 Single Barrel Rum, judged Best in the World at the annual
 San Francisco Wine and Spirits Championships, and the
 artisan tequilas of Porfidio 100% Agave Tequilas, judged Best
 Tequila four years running by the Wine Enthusiast magazine. For
 more information, please click (go to) htmla
href=http://www.cruzanrums.com;http:///aa
href=http://www.cruzanrums;www.cruzanrums.com/a/html
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Magstr.39921

2001-10-08 Thread Serge Dergham

stop shouting please
it is important for all of us to understand what is going on.
Beside, I did state the attachement contain a virus, and all you need to do
is not open it, I hope for your sake you know that, If you don't know that,
you probably don't belong on this list.


- Original Message -
From: Ken Lizotte [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, October 08, 2001 3:41 PM
Subject: Re: [Declude.Virus] Magstr.39921


 NOT A VERY NICE THING TO DO. SEND A VIRUS TO THE WHOLE LIST!

 PLEASE GET A NEW LIFE, THANK YOU.

 Ken
 - Original Message -
 From: Serge Dergham [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, October 08, 2001 11:21 AM
 Subject: [Declude.Virus] Magstr.39921


  Attached is the Imail Mailbox with a virus tha got thru today
 
  Declude+fprot
 
  Please check and let us know
 
  Thanks
 
  - Original Message -
  From: R. Scott Perry [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Monday, October 08, 2001 1:17 PM
  Subject: Re: [Declude.Virus] Declude Confirm for sending email to lists?
 
 
  
   Ideally on large lists the sender should have to send the message,
   receive a confirmation request, and then send a confirming message,
in
   the same style as a Declude Confirm used for subscription. That way a
   forged message can't get distributed as if it were legitimate.
   
   Any solutions? Could Declude Confirm be configured or extended to
take
   this role?
  
   I don't think this could be done with Declude Confirm, nor do I know
of
  any
   other way to accomplish it.  This is something we may consider adding
to
   Declude Confirm.  One option in the meantime would be to use passwords
   (depending on the type of list, that may or may not be convenient).
   -Scott
  
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.  You can E-mail
   [EMAIL PROTECTED] for assistance.  You can visit our web
   site at http://www.declude.com .
  
  
 

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] External filter program

2001-10-03 Thread Serge Dergham

Hi,

When using declude, can we still use an externel filter program as in 
http://support.ipswitch.com/kb/IM-2517-DM01.htm  ???

thanks

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] a virus went thru !

2001-09-27 Thread Serge Dergham

hi,

Declude + Fprot is a wonderful couple, catching hundred of viruses daily .
But I just received an email infected with the W32.Magistr.39921@mm virus
(caught localy by norton).
I checked some declude logs, never found this virus
Can it be a Fprot problem ? or can declude under heavy trafic let a virus
thru from time to time ?
How can I verify ?

thanks



This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .