Re: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

2007-10-19 Thread Linda Pagillo
Please give me a call at 1-866-332-5833 ext. 7008.

If you have any further questions, please do not hesitate to contact me
either by email or call Toll free 1-866-332-5833  Ext.7008

Linda Pagillo
Technical Support Engineer | Declude

Your Email Security is our business

Office: 978.499.2933  x7008
Toll Free: 1-866.332.5833 x7008
Fax: 978.334.0700
Email: [EMAIL PROTECTED]
- Original Message - 
From: Hirthe, Alexander [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, October 19, 2007 12:08 PM
Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46


Hello,

our declude is crashing, no matter if I try 4.3.46 or 4.3.64.
It looks like a special offer with about 1400 To Addresses.

The Header looks not very strange:

Received: from moutng.kundenserver.de [212.227.126.186] by xx-GmbH.de
with ESMTP
  (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200
Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [87.139.111.133])
by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis)
id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200
Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC;
 Fri, 19 Oct 2007 16:45:57 +0200
Return-Path: [EMAIL PROTECTED]
Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200
Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates
212.227.126.187 as permitted sender) client-ip=212.227.126.187;
[EMAIL PROTECTED];
helo=moutng.kundenserver.de;
Return-Path: [EMAIL PROTECTED]
Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200
Received-SPF: none (mxeu18: 12.107.122.224 is neither permitted nor denied
by domain of europastar.com) client-ip=12.107.122.224;
[EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org;
Message-ID: [EMAIL PROTECTED]
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Content-class: urn:content-classes:message
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Content-Type: multipart/related;
type=multipart/alternative;
boundary=_=_NextPart_001_01C8122B.6A62C395
Subject:
=?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?=
=?utf-8?Q?angebot!?=
Date: Fri, 19 Oct 2007 16:45:57 +0200
X-Mailer: Microsoft CDO for Exchange 2000
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Thread-Topic:
=?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?=
=?utf-8?Q?bot!?=
Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA=
From: Bailly-Henguely, Jocelyne [EMAIL PROTECTED]
To: [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],


And this repeated till line 1459.
It's 164 KB in size, with mid nothing in the logfile.
Eventlog says stopped unexpectedly :)

?

Alex






Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

2007-10-19 Thread David Barker
Put the LOGLEVEL on DEBUG and capture a crash, send it to
[EMAIL PROTECTED] looks like it could be a buffer overflow issue. Also if
there is a declude.gp1 file in the c:\ send that as well.

Thanks
David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe,
Alexander
Sent: Friday, October 19, 2007 1:09 PM
To: declude.virus@declude.com
Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

Hello,

our declude is crashing, no matter if I try 4.3.46 or 4.3.64.
It looks like a special offer with about 1400 To Addresses.

The Header looks not very strange:

Received: from moutng.kundenserver.de [212.227.126.186] by xx-GmbH.de
with ESMTP
  (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200
Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [87.139.111.133])
by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis)
id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200
Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC;
 Fri, 19 Oct 2007 16:45:57 +0200
Return-Path: [EMAIL PROTECTED]
Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200
Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates
212.227.126.187 as permitted sender) client-ip=212.227.126.187;
[EMAIL PROTECTED];
helo=moutng.kundenserver.de;
Return-Path: [EMAIL PROTECTED]
Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200
Received-SPF: none (mxeu18: 12.107.122.224 is neither permitted nor denied
by domain of europastar.com) client-ip=12.107.122.224;
[EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org;
Message-ID: [EMAIL PROTECTED]
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Content-class: urn:content-classes:message
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Content-Type: multipart/related;
type=multipart/alternative;
boundary=_=_NextPart_001_01C8122B.6A62C395
Subject:
=?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?=
=?utf-8?Q?angebot!?=
Date: Fri, 19 Oct 2007 16:45:57 +0200
X-Mailer: Microsoft CDO for Exchange 2000
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Thread-Topic:
=?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?=
=?utf-8?Q?bot!?=
Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA=
From: Bailly-Henguely, Jocelyne [EMAIL PROTECTED]
To: [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],


And this repeated till line 1459.
It's 164 KB in size, with mid nothing in the logfile.
Eventlog says stopped unexpectedly :)

?

Alex






Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

2007-10-18 Thread David Barker
My apologies I was lysdexic

Latest Full Release 4.3.46
Latest Interim 4.3.64


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 18, 2007 3:56 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

Dave,

Lots of confusion here:

a) the subject refers to 4.3.46 - which shows up on my customer screen as
the latest RELEASE

b) however, that's less than the interim 4.3.57 that is shown on my
customer screen?

c) the body of your email refers to 4.3.64 - which would make more sense.
Except, THAT number is not visible ANYWHERE on my customer screen, neither
as a release NOR as an interim version number?

Best Regards,
Andy

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, October 16, 2007 2:32 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.JunkMail] 4.3.46

4.3.64 available, we have made some changes to address the vulnerability if
you would like to test this - it can be downloaded from the interim
location.


David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

2007-10-18 Thread Harry Palmer
The dyslexic atheist says, There is no dog. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Thursday, October 18, 2007 3:07 PM
To: declude.virus@declude.com; [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

My apologies I was lysdexic

Latest Full Release 4.3.46
Latest Interim 4.3.64


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 18, 2007 3:56 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

Dave,

Lots of confusion here:

a) the subject refers to 4.3.46 - which shows up on my customer screen as
the latest RELEASE

b) however, that's less than the interim 4.3.57 that is shown on my
customer screen?

c) the body of your email refers to 4.3.64 - which would make more sense.
Except, THAT number is not visible ANYWHERE on my customer screen, neither
as a release NOR as an interim version number?

Best Regards,
Andy

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, October 16, 2007 2:32 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.JunkMail] 4.3.46

4.3.64 available, we have made some changes to address the vulnerability if
you would like to test this - it can be downloaded from the interim
location.


David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

2007-10-18 Thread David Barker
My apologies I was lysdexic

Latest Full Release 4.3.46
Latest Interim 4.3.64


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 18, 2007 3:56 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46

Dave,

Lots of confusion here:

a) the subject refers to 4.3.46 - which shows up on my customer screen as
the latest RELEASE

b) however, that's less than the interim 4.3.57 that is shown on my
customer screen?

c) the body of your email refers to 4.3.64 - which would make more sense.
Except, THAT number is not visible ANYWHERE on my customer screen, neither
as a release NOR as an interim version number?

Best Regards,
Andy

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, October 16, 2007 2:32 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.JunkMail] 4.3.46

4.3.64 available, we have made some changes to address the vulnerability if
you would like to test this - it can be downloaded from the interim
location.


David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.