[Declude.Virus] Virus getting by F-Prot

My exe filter caught a message with an attachment named picacu which is apparently one of the Klez variants. I am using F-Prot 3.12a with the latest defs and it caught another of the same virus. I thought that all of these should be caught by the anti-virus instead of BANEXT. Do I have somethin

Re: [Declude.Virus] Virus getting by F-Prot

>My exe filter caught a message with an attachment named picacu which is >apparently one of the Klez variants. I am using F-Prot 3.12a with the >latest defs and it caught another of the same virus. I thought that all >of these should be caught by the anti-virus instead of BANEXT. Do I >have so

RE: [Declude.Virus] Virus getting by F-Prot

I am sure Scott will reply in a minute, but until then, it could be a malformed version thereby not setting off F-Prot as infected. What does the virus log say for the message? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-

RE: [Declude.Virus] rather delete than hold messages containing viruses

I dont see DELETEVIRUSES in my virus.cfg file, where do I add it? Thanks Timothy C. Bohen CMSInter.Net LLC / Crystal MicroSystems LLC === web : www.cmsinter.net email : [EMAIL PROTECTED] phone : 989.235.5100 x222 fax : 989.235.5151 -Original Mess

Re: [Declude.Virus] Virus getting by F-Prot

Here's the relevant area of the log. A couple of clean ones, the one caught by F-Prot, a few more clean, and the one caught by BANEXT. Sorry, but I've already deleted the message files. 07/24/2002 12:24:49 Qf0f001a4012a32cf Scanned: Virus Free [MIME: 1 1164] 07/24/2002 12:26:06 Qf13c089f00965df

Re: [Declude.Virus] Virus getting by F-Prot

>07/24/2002 12:30:54 Qf25d08940070c6e1 Scanned: Banned file extension. >[MIME: 3 1404] Given the size (1,404 bytes), it sounds like it was a corrupt, non-viable version that you received (it would normally be more like about 30-40K if it were a real virus). -Scott --- [Th

RE: [Declude.Virus] rather delete than hold messagescontaining viruses

>I dont see DELETEVIRUSES in my virus.cfg file, where do I add it? Any of the entries in the virus.cfg file can go anywhere in the file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus

RE: [Declude.Virus] rather delete than hold messages containing viruses

Thanks! Timothy C. Bohen CMSInter.Net LLC / Crystal MicroSystems LLC === web : www.cmsinter.net email : [EMAIL PROTECTED] phone : 989.235.5100 x222 fax : 989.235.5151 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Beha

RE: [Declude.Virus] rather delete than hold messages containing viruses

Before u do this consider the following We had an incident with F-prot where the def files went corrupt, because of this ALL mail was dumped in the virus dir about 20 000 before we got an alarm about something went wrong. If you by default tell it to delete the virus u cant reinsert them in th