Re: [Declude.Virus] BugBear B - Slipping through

2003-07-24 Thread adrian.wells
Hi Scot,

 Using Declude V?

 What version (you can type \IMail\Declude -diag from a command prompt to
 find out)?

-diag returns nothing

-h returns 0 Checks:

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] BugBear B - Slipping through

2003-07-24 Thread R. Scott Perry

 Using Declude V?

 What version (you can type \IMail\Declude -diag from a command prompt to
 find out)?
-diag returns nothing
Are you sure that typing \IMail\Declude -diag from a command prompt 
doesn't return anything?

If so, that means that you are running an old version (at least 2 years old 
-- the -diag option was added to v1.23).  I would recommend upgrading to 
the latest version that you are entitled to -- if you aren't covered by an 
active Service Agreement, it would probably be worth ordering one to 
upgrade to the latest version.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] BugBear B - Slipping through

2003-07-22 Thread R. Scott Perry

Declude is catching some instances of bugbear but letting others through!
What do the log files show when it goes through?

What version of Declude Virus are you running?

Are your virus definitions (and the virus scanner .exe file) up to date?

It's not informing me or users of viruses either!
Do you have the \IMail\Declude\*.eml files (with To:, From:, and 
Subject: lines before the first blank line, and no HTML codes in 
there)?  What do the log files show?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] BugBear B - Slipping through

2003-07-22 Thread adrian.wells
Imail Log
At 09:00:00 I see an infected machine send 101 emails!

Declude Log
At 09:00:57 I see files are infected [3]
and the line below says contains a virus

I only found about 4 files in the Virus folder this morning!

Our AV is updated daily (F-Prot)

Using Declude V?

To, From  Subject are on the first 3 lines (one line each) - No HTML



- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 22, 2003 12:56 PM
Subject: Re: [Declude.Virus] BugBear B - Slipping through



 Declude is catching some instances of bugbear but letting others through!

 What do the log files show when it goes through?

 What version of Declude Virus are you running?

 Are your virus definitions (and the virus scanner .exe file) up to date?

 It's not informing me or users of viruses either!

 Do you have the \IMail\Declude\*.eml files (with To:, From:, and
 Subject: lines before the first blank line, and no HTML codes in
 there)?  What do the log files show?

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] BugBear B - Slipping through

2003-07-22 Thread R. Scott Perry

Imail Log
At 09:00:00 I see an infected machine send 101 emails!
Declude Log
At 09:00:57 I see files are infected [3]
and the line below says contains a virus
What would be most useful is the log file entries for the E-mails that were 
not caught.  For example, there are very big differences in troubleshooting 
Virus Free versus files are infected versus no log file entries.  In 
this case, it could be any of the three (or an error/warning message).

I only found about 4 files in the Virus folder this morning!
That's normal, if only 2 E-mails were caught.

Using Declude V?
What version (you can type \IMail\Declude -diag from a command prompt to 
find out)?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.