My exe filter caught a message with an attachment named picacu which is
apparently one of the Klez variants. I am using F-Prot 3.12a with the
latest defs and it caught another of the same virus. I thought that all
of these should be caught by the anti-virus instead of BANEXT. Do I
have somethin
>My exe filter caught a message with an attachment named picacu which is
>apparently one of the Klez variants. I am using F-Prot 3.12a with the
>latest defs and it caught another of the same virus. I thought that all
>of these should be caught by the anti-virus instead of BANEXT. Do I
>have so
I am sure Scott will reply in a minute, but until then, it could be a
malformed version thereby not setting off F-Prot as infected.
What does the virus log say for the message?
John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-
I dont see DELETEVIRUSES in my virus.cfg file, where do I add it?
Thanks
Timothy C. Bohen
CMSInter.Net LLC / Crystal MicroSystems LLC
===
web : www.cmsinter.net
email : [EMAIL PROTECTED]
phone : 989.235.5100 x222
fax : 989.235.5151
-Original Mess
Here's the relevant area of the log. A couple of clean ones, the one
caught by F-Prot, a few more clean, and the one caught by BANEXT.
Sorry, but I've already deleted the message files.
07/24/2002 12:24:49 Qf0f001a4012a32cf Scanned: Virus Free [MIME: 1 1164]
07/24/2002 12:26:06 Qf13c089f00965df
>07/24/2002 12:30:54 Qf25d08940070c6e1 Scanned: Banned file extension.
>[MIME: 3 1404]
Given the size (1,404 bytes), it sounds like it was a corrupt, non-viable
version that you received (it would normally be more like about 30-40K if
it were a real virus).
-Scott
---
[Th
>I dont see DELETEVIRUSES in my virus.cfg file, where do I add it?
Any of the entries in the virus.cfg file can go anywhere in the file.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus
Thanks!
Timothy C. Bohen
CMSInter.Net LLC / Crystal MicroSystems LLC
===
web : www.cmsinter.net
email : [EMAIL PROTECTED]
phone : 989.235.5100 x222
fax : 989.235.5151
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Beha
Before u do this consider the following
We had an incident with F-prot where the def files went corrupt, because of this ALL
mail was dumped in the virus dir about 20 000
before we got an alarm about something went wrong. If you by default tell it to
delete the virus u cant reinsert them in th