[Declude.Virus] MAILBOX spam
When using the MAILBOX action for test failures, we have noticed that forward or alias addresses do not get sent to the spam folder but actually get delevered to the main inbox. Do we have something configured wrong or is there way to fix this or are we stuck with it? Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] New Errors under Imail 8.03
It seems to only affect servers with a high volume of mail (several thousand E-mails per hour). Does 1-2k per hour qualify as several thousand? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Virus protection between users on same iMail server?
For our own support reasons, we do not give people the option when it comes to virus scanning. Spam filtering is an option. If we host it, we scan for viruses. So far we have not had any complaints on this policy. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain - Original Message - From: Paul Fuhrmeister [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, September 05, 2003 10:50 AM Subject: [Declude.Virus] Virus protection between users on same iMail server? Real life example: There are two users, we'll call them [EMAIL PROTECTED] and [EMAIL PROTECTED] Both users are hosted on the same iMail server, but at different domains which are separate virtual servers. Declude virus scans all mail for all users both in and out of GoodDomain.com. BadDomain.com has no virus scanning. [EMAIL PROTECTED] has the sobig virus and is sending it to [EMAIL PROTECTED] Will Declude Virus protect [EMAIL PROTECTED] in this situation, where both users are on the same iMail machine? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] New Virus?
I had a customer email meflamingour server because a message keeps poping up saying the system is shutting down and then reboots their PC. I searched Sophos and a couple others, but cannot find a virus that fits this description. But I thought I saw something on the news this last weekend. Anyone have any ideas on this? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Recent virus not being caught
If you upgrade F-Prot to v3.14 or later, it will get caught. It must be 3.14a or later. We were running 3.14 before. But it is working with the latest engine. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Yahoo's Yahoo's...
How can I deal with this trash that was not realy sent from Yahoo? We have to add a neg weight so legitimate email does get from Yahoo, but I get stuff like this every day: Received: from Hyperion.tenforward.com [65.161.10.61] by tenforward.com with ESMTP (SMTPD32-7.15) id AE4ACD7300CC; Thu, 03 Apr 2003 11:40:58 -0800 Received: from mercury.acutechnetworkservices.com (ip-64-32-158-253.dsl.lax.megapath.net [64.32.158.253]) by Hyperion.tenforward.com (Postfix) with ESMTP id 619153AD3B for [EMAIL PROTECTED]; Thu, 3 Apr 2003 11:40:57 -0800 (PST) Received: from Gotico ([211.158.92.141]) by mercury.acutechnetworkservices.com with Microsoft SMTPSVC(5.0.2195.5329); Thu, 3 Apr 2003 09:48:00 -0800 Reply-To: Helen Mendell [EMAIL PROTECTED] From: Helen Mendell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: =?ISO-8859-3?B?dGZkZXNpZ24sR29vZCBzaXRlcyB0byBzZWUsIHlvdSBhc2tlZCB0byBiZSBvb iBvdXIgbGlzdA==?= Date: Thu, 3 Apr 2003 17:48:20 GMT Mime-Version: 1.0 Content-Type: multipart/mixed; boundary==_NextPart_0404030148 X-Mailer: Microsoft Outlook Express 6.00.2462. Message-ID: [EMAIL PROTECTED] X-OriginalArrivalTime: 03 Apr 2003 17:48:01.0180 (UTC) FILETIME=[2B8855C0:01C2FA09] X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: SNIFFER: Message failed SNIFFER: 63. X-Declude-Sender: [EMAIL PROTECTED] [65.161.10.61] X-Note: This E-mail was scanned for spam. X-Note: This E-mail was scanned for Viruses and found clean. X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, WHITEILIST, SNIFFER X-Note: This E-mail was sent from hyperion.tenforward.com ([65.161.10.61]). X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 319611330 Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Yahoo's Yahoo's...
One option might be to set up a filter with the following lines: MAILFROM 8 CONTAINS @yahoo.com REVDNS -8 CONTAINS .yahoo.com With these, E-mail with a return address of @yahoo.com will get a weight of 8, unless it comes from a yahoo.com IP address. The disadvantage to this it that it would give a weight of -8 to E-mail from a valid yahoo.com mailserver that was sent with a non-Yahoo return address. Thanks. More food for thought... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Question on Yaha virus
Doesn't the Windows version of F-Prot, which is where the fpcmd.exe is from, have it's own updater? Yes and this is what we use here. So far it works great for us. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] BANEXT SHS
I have 2 people that are mad at me for blocking the SHS extension. Are there any web pages from anti virus companies or some such Authority that I can send them on why I am blocking it? They say they are sending a Christmas card. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] BANEXT SHS
Hope that helps. Thanks John! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] banned files
http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx Is this what you are looking for? Yes, thanks! I had it once before and used it to make my banned file list from at someone else's recommendation on this list. I figured it was an easy way to have some Authority behind the file extensions. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Lentin virus
I had to add SKIPIFVIRUSNAMEHAS Lentin as we were seeing a lot of MAILER-DAEMON@localhost bounce messages. I was not sure if it was someones badly configured mail program or if Lentin was screwing things up. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Quite List?
OK, who is the wise guy (or gal) that made the comment this morning about a quite list? It was quite. It's Monday and I want my hair back! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Quite List?
I will let you have what is left of mine. That doesn't sound promising... Did you know that banging your head against a wall uses 150 calories per hour? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Stop warnings by domain?
Perhaps you could have the notifications sent from an account other than the postmaster account, and occasionally check the account for new mail? I would still get the emails... it is really just AOL I want to keep from sending notifications to. We will likely be adding the ability to block the notifications to certain users/domains at some point. Cool! I did get a user that threw a fit about the number of notifications he received. I did take the time to explain to him about why and so on and he understood. It would be nice to add his name only to a block list. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Virus Scanner
Aside from F-Prot, which other low cost virus scanners are Declude users using? I have been so pleased with F-Prot that I have not looked anywhere else. I started with it because of price, but we quickly replaced McAffee around the office with the site license version of F-Prot. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Stop warnings by domain?
Is there a way to keep from sending warning emails to certain domains, like AOL? I am getting tired of AOL users writing postmaster back and saying they do not have a virus or that they do not know who sent it to them, etc... it wastes a lot of my time! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Banned extensions
I have received 2 notices of e-mails failing the banned extensions policy in the last two days. We had the same thing happen a couple weeks ago. The customer was sending an HTML email that was a web page on another server. The HTML called an EXE file in it and was rejected. At least I assume that was the reason... the customer sent the link instead and had no problems so I ignored the issue since. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Declude Virus v1.55 (beta) released
FORGINGVIRUS Klez ...at the top of my postmater.eml and recip.eml files, but with no effect. Sorry, I didn't specify -- this one goes in the \IMail\Declude\virus.cfg file. Does this allow us to get rid of the SKIPIFVIRUSNAMEHAS Klez line in the eml files? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] New computer virus can infect picture files
Am I missing something? Not much. But as the interviewer in the AP article stated, it is only a matter of time now that it has been proven it could be done after all. We will most likely see this type of exploit in a socially engineered trojan. Snow White is still floating around out there... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] W32/Frethem-Fam
One more reason to have a banned extension policy in place. I do now! I had avoided it as there are legitimate reasons to send certain files. But the good of the many... It got by F-Prot 3.12a/Declude 1.53 and when I did a Google search on the name, McAffee was the only response and it was dated the 7th. I find this interesting! What kind of notification is sent if it is a BANEXT rejection if any? Is there a text file I need to create for it? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] W32/Frethem-Fam
I was wondering does F-Prot have daily downloadable virus updates? If not what virus software do you recommend if you want to schedule jobs to run to make sure that we have the latest updates. Or should we use 2 virus checkers. If you are using the DOS version, there are scripts available to check and download automatically. I use the Windows version and have it's own scheduler set to check every 6 hours for updates. They just do not have an update yet... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] W32/Frethem-Fam
Does the windows updater work for you? I should say reliably? I have found it does don't seem to work at all. I do use the scripts for the server and that works. F-Prot 3.12a I have had no problems with the Windows updater at all. We purchased the site license and I have found it to be more reliable on many of our computers here. I did find one of our older P90's not updating. but when I upgraded it, it did start working just fine. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] F-Prot Virus Bulletin Rating
Has anyone ever noticed that Frisk F-Prot failed the Virus Bulletin rating? http://www.virusbtn.com/vb100/archives/tests.xml?200206 Is that announcement bulletins or definition updates? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Which F-Prot scanner to call?
I followed a thread on the IMail list today where a Declude AV user upgraded to F-Prot 3.12a and apparently the F-Prot.exe file disappeared. So he updated his virus.config file to use the FPcmd.exe file instead, and he says it's working fine. I tried that and it does NOT work fine. The test file from declude will pass right through! At least that was what I found here. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] SKIPIFVIRUSNAMEHAS
Thanks everyone. I was just wondering what others were doing. We use: recip.eml SKIPIFVIRUSNAMEHAS Vulnerability sender.eml SKIPIFVIRUSNAMEHAS Vulnerability SKIPIFVIRUSNAMEHAS Magistr SKIPIFVIRUSNAMEHAS Hybris SKIPIFVIRUSNAMEHAS Klez We do not use the postmaster emails as some servers were getting way too many and we got compliants. And I was getting too many myself... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Not scanning files
No, but fpcmd.exe is and it seems to be working now that I changed the declude.cfg file to reflect this change. I hate it when people fix things that are not broken... why rename it? I meant to type virus.cfg file... It has been one of the weeks today! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Not scanning files
Well, I get the test files, so it is not working. i reinstalled F-Prot to make sure the DOS version was checked and it is. Any more ides? Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Not scanning files
Well, I get the test files, so it is not working. i reinstalled F-Prot to make sure the DOS version was checked and it is. Any more ides? I uninstalled F-prot completely and reinstalled and the F-prot.exe file is now there. And the EICAR.COM file is now blocked... What a PITA! Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Patch.exe Going through
It turns out that this virus, like Gibe, also can be sent using malformed MIME segments (in this case, it is sending an end of file marker about 10% of the way through the file, and is sending longer lines than are allowed). We should have a new version of Declude Virus in the morning that will process these two abnormalities in a way that the original file will be seen, in case it is sent to a mail client that can decode it. I am glad it is not me then. I will go and put my sledge hammer away before I cause expensive damage in the server room... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Bogus MS patch
FYI, we just had one caught here using F-Prot with the March 7 virus definitions. The name was reported as W32/Gibe.A@mm. That was the first thing I checked and we are (and were) running them. I have F-Prot set to check for updates every 6 hours. Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] MISSING_REVERSE_DNS:setting up DECLUDE
Whoops, I didn't mean to send to the whole list! Sorry, I'm REALLY new at this. Don't worry about it. We were all new at this at one point. Some of us just don't want to admit how long ago that was ;) Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications E-Commerce that makes sense! 360-457-9023 http://www.tenforward.com/webcam Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
[Declude.Virus] MISSING_REVERSE_DNS:New install of Declude Virus
Greetings list! We installed Declude Virus yesterday without any major problems (the demo of F-Prot is not upgradable to the newest definition files... and we had to wait for the key to arrive today). In the last 3 hours, Declude has intercepted 732 virus attachements! Has anyone written a log analyzer to sumarize what is scanned and blocked at the end of the day? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications E-Commerce that makes sense! 360-457-9023http://store.tenforward.com Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
MISSING_REVERSE_DNS:Re: [Declude.Virus] DSN:Virus Log File Analyzer
A quick and dirty Virus Log Analyzer is available at http://www.csonline.net/imailstuff/Virusanalyzer.zip You can select single or multiple the log files and can select the location for the summary file to be saved to. This is nothing fancy. Below is a sample output. This looks like just what I wanted. I will download it and play... Thanks! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications E-Commerce that makes sense! 360-457-9023http://store.tenforward.com Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
