No, I have the "on access" protection turned OFF for the whole Imail
directory as this seemed to be causing a problem when I had it turned
on.
I have the default Declude time out set..I didn't mess with this setting
at all.
Sharyn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAI
>Beside, I did state the attachement contain a virus, and all you need to do
>is not open it, I hope for your sake you know that, If you don't know that,
>you probably don't belong on this list.
The problem is that some viruses will load automatically under some
circumstances (such as using cer
could you guys fight in private please? i got a job to do here.
thanks
- Original Message -
From: "Serge Dergham" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 08, 2001 10:57 AM
Subject: Re: [Declude.Virus] Magstr.39921
> stop shouting please
> it is important for
Do you have NetShield's "on access" protection turned ON for the IMail
directory? I do not and also have Declude set to a short (10 seconds)
time-out. I may have missed it because of these settings...
Rick
At 11:50 AM 10/8/2001 -0400, you wrote:
>Hmmm
>
>I'm using the Declude/McAfee Nets
stop shouting please
it is important for all of us to understand what is going on.
Beside, I did state the attachement contain a virus, and all you need to do
is not open it, I hope for your sake you know that, If you don't know that,
you probably don't belong on this list.
- Original Messag
My Declude/McAfee caught it straight away.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, October 08, 2001 11:43 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Magstr.39921
>Attached is the Imail Mailbox with a viru
I'm using McAfee Netshield. I don't have a clue why my setup caught it,
and others' using Netshield didn't...not that I'm complaining!
Sharyn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Serge Dergham
Sent: Monday, October 08, 2001 11:50 AM
To: [EMAI
Since the others are commenting --- Declude with McAfee (4164
definitions) caught this at the server.
John
Postmaster wrote:
>
> Declude Virus 1.26a caught a incoming virus
> * Subject "[Declude.Virus] Magstr.39921"
> * From [EMAIL PROTECTED]
> * To: [EMAIL PROTECTED]
> * Msg ID: <007001c1500c$
Cheers Scott,
FYI >>> my Mcafee desktop AV flagged it and deleted it.
Has there been a problem with Mcafee not flagging this corrupt version of
Magistr?
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Tel: +44 (0)1223 326512
-Or
Scott, is there any way that the virMMDD.log for declude can contain more
info that below when handling banned extensions?
Thanks
Chris
10/08/2001 08:39:57 Q9e9a13e Scanned:
Banned file extension. [BINHEX: 1 0][MIME: 3 274192]
Hi Sharyn,
What av are you using with Declude ?
- Original Message -
From: "Sharyn Schmidt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 08, 2001 3:41 PM
Subject: RE: [Declude.Virus] Magstr.39921
> The Declude installed on my mail server nabbed this :)
>
> Sharyn
Sorry, I wont send it to the list again,
However, Its interesting to see that it was caught by a couple of users
while it did go thru for others
We are waiting for more info, Scott
- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, Octobe
Hmmm
I'm using the Declude/McAfee Netshield setup and mine caught it,
complete with email notification that I had received a virus,
etc...wonder if I just got lucky :)
Sharyn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Rick Rountree
Sent: Monda
NOT A VERY NICE THING TO DO. SEND A VIRUS TO THE WHOLE LIST!
PLEASE GET A NEW LIFE, THANK YOU.
Ken
- Original Message -
From: "Serge Dergham" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 08, 2001 11:21 AM
Subject: [Declude.Virus] Magstr.39921
> Attached is the
Declude and latest F-prot defs on server did NOT catch this. Neither did my
F-Prot desktop with latest defs.
David
- Original Message -
From: "Chris Hunt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Monday, October 08, 2001 11:40 AM
Subject: [Declude.Virus] H
>Why did this virus get past Declude!!??
For several reasons.
First, it was sent in a .mbx file. That's a proprietary IMail format, with
the virus encoded in there. Most virus scanners won't find a virus MIME
encoded within another file.
Second, it seems that this is the corrupt version of
Ditto here and if they are infected, Declude+McAfee NetShield also let them
through.
Rick Rountree
At 09:36 AM 10/8/2001 -0600, you wrote:
>I received this message with several attached files, .mbx .srt .iud. So
>either they aren't infected, or Fprot also let them through here.
>
>Anyone else?
>I received this message with several attached files, .mbx .srt .iud. So
>either they aren't infected, or Fprot also let them through here.
Since the .mbx file was sent, it may or may not get caught by a virus
scanner (since the file is encoded within the .mbx file).
>Attached is the Imail Mailbox with a virus tha got thru today
This may be the corrupted version of Magistr, that some AV programs detect
and others do not. I tried F-Prot with the latest definitions, and McAfee,
and neither caught it. The corrupt version of Magistr does not do any
damage i
Mine didn't catch it using Inoculan 4.0. My Norton desktop scanner didn't
peep either. Kinda scary!
Rodney Bertsch
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sharyn Schmidt
Sent: Monday, October 08, 2001 11:42 AM
To: [EMAIL PROTECTED]
Subject: RE:
Hey Serge, how about not sending the whole list the
virus? [EMAIL PROTECTED] would be better.
Scott, Serge's email did get past my Declude 1.26a and F-Prot (Sept 22
defs), My desktop Mcafee caught it.
Chris
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an
The Declude installed on my mail server nabbed this :)
Sharyn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Dan Spangenberg
Sent: Monday, October 08, 2001 11:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Magstr.39921
I received this messa
>Attached is the Imail Mailbox with a virus tha got thru today
Please do NOT send viruses to this list.
If you need to send us a virus, it should be sent to
"[EMAIL PROTECTED]". Sending viruses intentionally to E-mail addresses
that are not equipped to handle them properly can be dangerous.
I received this message with several attached files, .mbx .srt .iud. So
either they aren't infected, or Fprot also let them through here.
Anyone else?
Dan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
> Sent: Monday, October 08, 20
Why did this virus get past Declude!!??
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Tel: +44 (0)1223 326512
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Serge Dergham
>
>Ideally on large lists the sender should have to send the message,
>receive a confirmation request, and then send a confirming message, in
>the same style as a Declude Confirm used for subscription. That way a
>forged message can't get distributed as if it were legitimate.
>
>Any solutions? Coul
Declude Confirm is an import enhancement (fix!) to Imail mailing lists
for subscribing and unsubscribing. Does anyone know of a similar
enhancement to secure messages sent to lists?
Although you can restrict lists to only allow members, or the
moderator/list-owner to send messages, forging a vali
Ok, so..we delete them manually?
I agree..I don't see any reason to save them if they really contain a
virus. Is there a certain time period that it's "safe" to get rid of
these?
Sharyn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Se
28 matches
Mail list logo
