Re: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread Darrell \([EMAIL PROTECTED])
Andy, 

Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). 

I do think its an AVG issue like you suggested.  I am trying to find a way 
to disable the built in AVG virus scanner to see if this message goes away. 

Darrell 

Andy Schmidt writes: 

Do you have a second/external scanner defined. 


May be the internal scanner (AVG) deletes an attachment and then Declude
complains that its gone when it tries to launch the secondary? 


Best Regards
Andy Schmidt 


Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206  

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 05:46 PM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.Virus] 4.2.20 Error in Log 



Since upgrading to 4.2.20 I started seeing the following error:  

07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories.07/12/2006 00:34:41.328  

This only happens when AVG catches a virus.  It did not get logged under 3.x 

version.  Nor do I have an On Access Virus Scanner.  Anyone else seeing 
this?  

Darrell  

See the log snippet below.  


07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; 
Length=733 Checksum=67160]
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip 
[base64; Length=108312 Checksum=13182423]
07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
IRC/BackDoor.SdBot.PMS
07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
[IRC/BackDoor.SdBot.PMS: 7]
07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories.07/12/2006 00:34:41.328 
q7bca020f6715.smd Vulnerability flags = 0
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; 
Length=733 Checksum=67160]
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip 
[base64; Length=108312 Checksum=13182423]
07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
IRC/BackDoor.SdBot.PMS
07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
[IRC/BackDoor.SdBot.PMS: 7]
07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories.  

Darrell  


 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers. 



---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com. 

 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com. 





---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread Andy Schmidt
There is a parameter in the Virus.cfg to disable the internal scanner.  I
don't have it in front of me, but it was in the comments just below the
external virus sample.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 08:34 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.20 Error in Log


Andy, 

Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). 

I do think its an AVG issue like you suggested.  I am trying to find a way 
to disable the built in AVG virus scanner to see if this message goes away. 

Darrell 

Andy Schmidt writes: 

 Do you have a second/external scanner defined.
 
 May be the internal scanner (AVG) deletes an attachment and then 
 Declude complains that its gone when it tries to launch the secondary?
 
 Best Regards
 Andy Schmidt
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206  
 
  
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Darrell
 ([EMAIL PROTECTED])
 Sent: Wednesday, July 12, 2006 05:46 PM
 To: declude.virus@declude.com
 Cc: [EMAIL PROTECTED]
 Subject: [Declude.Virus] 4.2.20 Error in Log 
 
 
 Since upgrading to 4.2.20 I started seeing the following error:
 
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files
 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328  
 
 This only happens when AVG catches a virus.  It did not get logged 
 under 3.x
 
 version.  Nor do I have an On Access Virus Scanner.  Anyone else 
 seeing
 this?  
 
 Darrell
 
 See the log snippet below.
 
 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 
 q7bca020f6715.smd MIME file: email-details.zip [base64; 
 Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 
 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328 
 q7bca020f6715.smd Vulnerability flags = 0
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit;

 Length=733 Checksum=67160]
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip

 [base64; Length=108312 Checksum=13182423]
 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
 IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.  
 
 Darrell
 
  ---
 Check out http://www.invariantsystems.com for utilities for Declude, 
 Imail,
 mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
 integration, MRTG Integration, and Log Parsers. 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
  
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread David Barker
BUILTINSCANNEROFF
Located in Virus.cfg. Will disable the internal AVG scanner. 

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 8:34 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.20 Error in Log

Andy, 

Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). 

I do think its an AVG issue like you suggested.  I am trying to find a way
to disable the built in AVG virus scanner to see if this message goes away. 

Darrell 

Andy Schmidt writes: 

 Do you have a second/external scanner defined. 
 
 May be the internal scanner (AVG) deletes an attachment and then 
 Declude complains that its gone when it tries to launch the secondary?
 
 Best Regards
 Andy Schmidt
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206  
 
  
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Darrell
 ([EMAIL PROTECTED])
 Sent: Wednesday, July 12, 2006 05:46 PM
 To: declude.virus@declude.com
 Cc: [EMAIL PROTECTED]
 Subject: [Declude.Virus] 4.2.20 Error in Log
 
 
 Since upgrading to 4.2.20 I started seeing the following error:  
 
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files were deleted.  You should not use an on-access virus scanner 
 that scans the \IMail directory or sub-directories.07/12/2006 
 00:34:41.328
 
 This only happens when AVG catches a virus.  It did not get logged 
 under 3.x
 
 version.  Nor do I have an On Access Virus Scanner.  Anyone else 
 seeing this?
 
 Darrell
 
 See the log snippet below.  
 
 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 [text/html][7bit;
 Length=733 Checksum=67160]
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 email-details.zip [base64; Length=108312 Checksum=13182423]
 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
 IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files were deleted.  You should not use an on-access virus scanner 
 that scans the \IMail directory or sub-directories.07/12/2006 
 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 [text/html][7bit;
 Length=733 Checksum=67160]
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 email-details.zip [base64; Length=108312 Checksum=13182423]
 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
 IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files were deleted.  You should not use an on-access virus scanner 
 that scans the \IMail directory or sub-directories.
 
 Darrell
 
  ---
 Check out http://www.invariantsystems.com for utilities for Declude, 
 Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
 SURBL/URI integration, MRTG Integration, and Log Parsers.
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com. 
 
  
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com. 
 
 


 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread Chris Asaro
To turn off the internal scanner BUILTINSCANNEROFF
Located in Virus.cfg. Will disable the internal AVG scanner.

Chris 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, July 13, 2006 8:58 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.2.20 Error in Log

There is a parameter in the Virus.cfg to disable the internal scanner.  I
don't have it in front of me, but it was in the comments just below the
external virus sample.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 08:34 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.20 Error in Log


Andy, 

Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). 

I do think its an AVG issue like you suggested.  I am trying to find a way 
to disable the built in AVG virus scanner to see if this message goes away. 

Darrell 

Andy Schmidt writes: 

 Do you have a second/external scanner defined.
 
 May be the internal scanner (AVG) deletes an attachment and then 
 Declude complains that its gone when it tries to launch the secondary?
 
 Best Regards
 Andy Schmidt
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206  
 
  
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Darrell
 ([EMAIL PROTECTED])
 Sent: Wednesday, July 12, 2006 05:46 PM
 To: declude.virus@declude.com
 Cc: [EMAIL PROTECTED]
 Subject: [Declude.Virus] 4.2.20 Error in Log 
 
 
 Since upgrading to 4.2.20 I started seeing the following error:
 
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files
 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328  
 
 This only happens when AVG catches a virus.  It did not get logged 
 under 3.x
 
 version.  Nor do I have an On Access Virus Scanner.  Anyone else 
 seeing
 this?  
 
 Darrell
 
 See the log snippet below.
 
 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 
 q7bca020f6715.smd MIME file: email-details.zip [base64; 
 Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 
 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328 
 q7bca020f6715.smd Vulnerability flags = 0
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit;

 Length=733 Checksum=67160]
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip

 [base64; Length=108312 Checksum=13182423]
 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
 IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.  
 
 Darrell
 
  ---
 Check out http://www.invariantsystems.com for utilities for Declude, 
 Imail,
 mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
 integration, MRTG Integration, and Log Parsers. 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
  
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list

RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread Chris Asaro
Your pretty quick for a pinata

Chris 
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Asaro
Sent: Thursday, July 13, 2006 9:10 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.2.20 Error in Log

To turn off the internal scanner BUILTINSCANNEROFF
Located in Virus.cfg. Will disable the internal AVG scanner.

Chris 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, July 13, 2006 8:58 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.2.20 Error in Log

There is a parameter in the Virus.cfg to disable the internal scanner.  I
don't have it in front of me, but it was in the comments just below the
external virus sample.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 08:34 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.20 Error in Log


Andy, 

Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee). 

I do think its an AVG issue like you suggested.  I am trying to find a way 
to disable the built in AVG virus scanner to see if this message goes away. 

Darrell 

Andy Schmidt writes: 

 Do you have a second/external scanner defined.
 
 May be the internal scanner (AVG) deletes an attachment and then 
 Declude complains that its gone when it tries to launch the secondary?
 
 Best Regards
 Andy Schmidt
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206  
 
  
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Darrell
 ([EMAIL PROTECTED])
 Sent: Wednesday, July 12, 2006 05:46 PM
 To: declude.virus@declude.com
 Cc: [EMAIL PROTECTED]
 Subject: [Declude.Virus] 4.2.20 Error in Log 
 
 
 Since upgrading to 4.2.20 I started seeing the following error:
 
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] 
 files
 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328  
 
 This only happens when AVG catches a virus.  It did not get logged 
 under 3.x
 
 version.  Nor do I have an On Access Virus Scanner.  Anyone else 
 seeing
 this?  
 
 Darrell
 
 See the log snippet below.
 
 07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0 
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: 
 [text/html][7bit; Length=733 Checksum=67160] 07/12/2006 00:34:41.328 
 q7bca020f6715.smd MIME file: email-details.zip [base64; 
 Length=108312 Checksum=13182423] 07/12/2006 00:34:41.781 
 q7bca020f6715.smd AVG Reports VIRUS: IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.07/12/2006 00:34:41.328 
 q7bca020f6715.smd Vulnerability flags = 0
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit;

 Length=733 Checksum=67160]
 07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip

 [base64; Length=108312 Checksum=13182423]
 07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
 IRC/BackDoor.SdBot.PMS
 07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
 [IRC/BackDoor.SdBot.PMS: 7]
 07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files

 were deleted.  You should not use an on-access virus scanner that scans
the 
 \IMail directory or sub-directories.  
 
 Darrell
 
  ---
 Check out http://www.invariantsystems.com for utilities for Declude, 
 Imail,
 mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
 integration, MRTG Integration, and Log Parsers. 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
  
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
 just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E

RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-12 Thread Andy Schmidt
Do you have a second/external scanner defined.

May be the internal scanner (AVG) deletes an attachment and then Declude
complains that its gone when it tries to launch the secondary?

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 05:46 PM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.Virus] 4.2.20 Error in Log


Since upgrading to 4.2.20 I started seeing the following error: 

07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories.07/12/2006 00:34:41.328 

This only happens when AVG catches a virus.  It did not get logged under 3.x

version.  Nor do I have an On Access Virus Scanner.  Anyone else seeing 
this? 

Darrell 

See the log snippet below. 

07/12/2006 00:34:41.328 q7bca020f6715.smd Vulnerability flags = 0
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; 
Length=733 Checksum=67160]
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip 
[base64; Length=108312 Checksum=13182423]
07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
IRC/BackDoor.SdBot.PMS
07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
[IRC/BackDoor.SdBot.PMS: 7]
07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories.07/12/2006 00:34:41.328 
q7bca020f6715.smd Vulnerability flags = 0
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: [text/html][7bit; 
Length=733 Checksum=67160]
07/12/2006 00:34:41.328 q7bca020f6715.smd MIME file: email-details.zip 
[base64; Length=108312 Checksum=13182423]
07/12/2006 00:34:41.781 q7bca020f6715.smd AVG Reports VIRUS: 
IRC/BackDoor.SdBot.PMS
07/12/2006 00:34:41.781 q7bca020f6715.smd File(s) are INFECTED 
[IRC/BackDoor.SdBot.PMS: 7]
07/12/2006 00:34:41.812 q7bca020f6715.smd 1 [1 of 2 not deleted] files 
were deleted.  You should not use an on-access virus scanner that scans the 
\IMail directory or sub-directories. 

Darrell 

 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.