RE: [Declude.Virus] Feature Request: Deletion of banned files
What it does is moving everything in the virus folder to a folder called day1, move everything in day1 to day2 and so forth and deletes what is in day 5. Attached is the script. Runs daily at 12:05 AM. I am sure some one can come up with a cleaner one, but it works. It also sends a report. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Thursday, May 06, 2004 8:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files John, Does this script delete just the files with the banned attachments or anything over 5 days old? Are you willing to share the script? Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, April 30, 2004 11:06 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files I have a script that runs just after midnight each day that in effect deletes those held after 5 days. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, April 30, 2004 6:21 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Feature Request: Deletion of banned files Hi Scott, We seem to be spending more and more time deleting from the virus hold queue files that have .PIF and .SCR extensions. We'd like to request a little more granular control over banning of extensions...specifically, a setting to go ahead a delete some of them. For example, instead of BANEXT PIF perhaps we could use DELEXT PIF Obviously there are a number of other extensions we would continue to ban, and check for legitimacy, but this would be helpful. Thoughts? Darin. image001.gifcd F:\spool\virus F: del F:\spool\virus\deleted\*.* /F /Q move /Y F:\spool\virus\day5\*.* F:\spool\virus\deleted\ move /Y F:\spool\virus\day4\*.* F:\spool\virus\day5\ move /Y F:\spool\virus\day3\*.* F:\spool\virus\day4\ move /Y F:\spool\virus\day2\*.* F:\spool\virus\day3\ move /Y F:\spool\virus\day1\*.* F:\spool\virus\day2\ find X-Note: This e-mail was received from IP: D*.SMD file1a.txt find X-Note: This e-mail was received from IP: file1a.txt file1b.txt sort file1b.txt file1.txt find Received: D*.SMD file2a.txt find Received: file2a.txt file2b.txt sort file2b.txt file2.txt xcopy *.smd f:\spool\virus\day1 xcopy *.GSC f:\spool\virus\day1 del *.smd del *.GSC c:\imail\imail1.exe -f c:\batchfiles\virusfrombody.txt -s Virus report eServices For You by IP -t [EMAIL PROTECTED] -u [EMAIL PROTECTED] -a f:\spool\virus\file1.txt c:\imail\imail1.exe -f c:\batchfiles\virusfrombody.txt -s Virus report eServices For You by Received -t [EMAIL PROTECTED] -u [EMAIL PROTECTED] -a f:\spool\virus\file2.txt del file1a.txt del file1b.txt del file1.txt del file2a.txt del file2b.txt del file2.txt
RE: [Declude.Virus] Feature Request: Deletion of banned files
Thanx I am going to shamelessly plagiarize. : Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, May 07, 2004 3:11 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files What it does is moving everything in the virus folder to a folder called day1, move everything in day1 to day2 and so forth and deletes what is in day 5. Attached is the script. Runs daily at 12:05 AM. I am sure some one can come up with a cleaner one, but it works. It also sends a report. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Thursday, May 06, 2004 8:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files John, Does this script delete just the files with the banned attachments or anything over 5 days old? Are you willing to share the script? Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, April 30, 2004 11:06 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files I have a script that runs just after midnight each day that in effect deletes those held after 5 days. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, April 30, 2004 6:21 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Feature Request: Deletion of banned files Hi Scott, We seem to be spending more and more time deleting from the virus hold queue files that have .PIF and .SCR extensions. We'd like to request a little more granular control over banning of extensions...specifically, a setting to go ahead a delete some of them. For example, instead of BANEXT PIF perhaps we could use DELEXT PIF Obviously there are a number of other extensions we would continue to ban, and check for legitimacy, but this would be helpful. Thoughts? Darin. image001.gif
RE: [Declude.Virus] Feature Request: Deletion of banned files
John, Does this script delete just the files with the banned attachments or anything over 5 days old? Are you willing to share the script? Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, April 30, 2004 11:06 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files I have a script that runs just after midnight each day that in effect deletes those held after 5 days. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, April 30, 2004 6:21 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Feature Request: Deletion of banned files Hi Scott, We seem to be spending more and more time deleting from the virus hold queue files that have .PIF and .SCR extensions. We'd like to request a little more granular control over banning of extensions...specifically, a setting to go ahead a delete some of them. For example, instead of BANEXT PIF perhaps we could use DELEXT PIF Obviously there are a number of other extensions we would continue to ban, and check for legitimacy, but this would be helpful. Thoughts? Darin. image001.gif
Re: [Declude.Virus] Feature Request: Deletion of banned files
Hi Scott, Did this make it into the suggestion database? Darin. - Original Message - From: Darin Cox To: [EMAIL PROTECTED] Sent: Friday, April 30, 2004 9:20 AM Subject: [Declude.Virus] Feature Request: Deletion of banned files Hi Scott, We seem to be spending more and more time deleting from the virus hold queue files that have .PIF and .SCR extensions. We'd like to request a little more granular control over banning of extensions...specifically, a setting to go ahead a delete some of them. For example, instead of BANEXT PIF perhaps we could use DELEXT PIF Obviously there are a number of other extensions we would continue to ban, and check for legitimacy, but this would be helpful. Thoughts? Darin.
Re: [Declude.Virus] Feature Request: Deletion of banned files
Did this make it into the suggestion database? Yes, it did. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Feature Request: Deletion of banned files
I appreciate the suggestion, but that wouldn't help in this case. If it was that simple, we would have already done it...grin. We review the virus held queue several times a day to make sure no legitimate documents were held. However, most are PIFs and SCRs which are never valid...so instead of having towade through them every time to see if there are any valid files, we'd like to automatically delete them. Darin. - Original Message - From: John Tolmachoff (Lists) To: [EMAIL PROTECTED] Sent: Friday, April 30, 2004 11:05 AM Subject: RE: [Declude.Virus] Feature Request: Deletion of banned files I have a script that runs just after midnight each day that in effect deletes those held after 5 days. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Friday, April 30, 2004 6:21 AMTo: [EMAIL PROTECTED]Subject: [Declude.Virus] Feature Request: Deletion of banned files Hi Scott, We seem to be spending more and more time deleting from the virus hold queue files that have .PIF and .SCR extensions. We'd like to request a little more granular control over banning of extensions...specifically, a setting to go ahead a delete some of them. For example, instead of BANEXT PIF perhaps we could use DELEXT PIF Obviously there are a number of other extensions we would continue to ban, and check for legitimacy, but this would be helpful. Thoughts? Darin.
