Yes, IMail was processing mail through that period. We started receiving
messages at our desktops that did not contain any declude headers, and that
was my first indication that something was wrong. The log even shows SMTP
refusals based on entries in my kill.lst file, so I'm guessing that IMail
Nope, no c:\declude.gpx files, I looked for those first. And I agree with
your conclusion about what happened, I just wish I had looked at the task
manager to see if there were a boatload of smtp32.exe processes sitting in
limbo. I'll bet there were.
-Original Message-
From: [EMAIL PROTECT
That would be ideal. But is it feasible?
If so, don't forget to include me on the royalties! :)
-Scott
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jonathan
Sent: Wednesday, January 22, 2003 12:37 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus]
I loaded 1.66 and the copy of fpcmd.exe from out of fp-win_312d_m.exe on
Monday morning. Since then my log files have grown dramatically, mostly from
the inclusion of countless lines like these:
01/20/2003 12:55:00 Q37e6146 Could not find parse string Infection in
report.txt
01/20/2003 12:55:01 Q3
I loaded 1.66 and the copy of fpcmd.exe from out of fp-win_312d_m.exe on
Monday morning. Since then my log files have grown dramatically, mostly from
the inclusion of countless lines like these:
01/20/2003 12:55:00 Q37e6146 Could not find parse string Infection in
report.txt
01/20/2003 12:55:01
I actually don't think it'd be too bad .. the keys would be stored on the
mail server, the program you call would find the body, encrypt it, pass
declude a return true, or however it's handled, and away it goes out to the
world. You are, of course, assuming that the user isn't using webmail, an
Yep. I changed the name of the old one and dropped the new one right in its
place. I'm going to get a fresh copy of 3.12D and repeat the install, and do
some more Eicar testing and get this right.
Thanks for the insights.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTE
Yep. I changed the name of the old one and dropped the new one right in its
place. I'm going to get a fresh copy of 3.12D and repeat the install, and do
some more Eicar testing and get this right.
If you want, you can use the debug mode ("LOGLEVEL DEBUG") until at least
one E-mail is scanned,
I think I have things back to normal. I'm writing this off to a buggered
fpcmd.exe file. As soon as I reinstalled f-prot, things started working
properly. I even caught a klez by happenstance in the middle of the eicars,
all with both scanners, so I'm going home.
-Original Message-
From: [
