Title: This in from my local newspaper
Looks like someone is busy writing a trojan that takes advantage of the security flaw that MS announced last week..
http://ap.polkonline.com/pstories/technology/20030916/1468801.shtml
Sharyn
FYI if anyone else experienced this problem, we pinned this down to F-Prot.
Disabling F-prot has resolved the problem.
Are you using F-Prot.exe or fpcmd.exe? Are you using the /NOFLOPPY
switch in the SCANFILE line in the \IMail\Declude\virus.cfg file (which
must be there for F-Prot.exe, and
Which exact version please?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.Virus-
[EMAIL PROTECTED] On Behalf Of Mailing Lists
Sent: Wednesday, September 17, 2003 7:37 AM
To: [EMAIL
Scott,
no we were using fpcmd.exe and /NOFLOPPY was not present.
I contacted f-prot support last Friday but have not heard back from them to
date.
Peter
SCANFILE1 D:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE
/DUMB /NOBOOT /REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
F-Prot version 3.14a
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 10:51 AM
Subject: RE: [Declude.Virus] Blue Screen on Imail with Declude Virus and
Declude Junkmail - Update
Which exact version please?
Does anyone have a solution for stopping the zip of death?
I've been running some DOS attacks on different network points of mine
trying to find weak spots when I found this problem
11036 Denial of Service: SMTP antivirus scanner DoS
Description
smtp (25/tcp)
For some reason, we could not send
Does anyone have a solution for stopping the zip of death?
It shouldn't affect Declude Virus.
This script sends the 42.zip recursive archive to the
mail server. If there is an antivirus filter, it may start eating huge
amounts of CPU or memory.
42.zip: ZIP archive, 42K, composed of nested zips
I wonder if you could maliciously embed tar files in a GZipped archive ..
then another gz within the tar .. etc. Reason being, Winzip will see the
tar, and responsd Would you like me to extract the .tar?.
Not that it's much worse, but the user might keep hitting yes more easily ..
I suppose
I would like to run Symantec Anti-Virus Corporate
edition on our mail server with its on access scanner to protect other file
areas other than the email going through it. I know problems would be
encountered if the on access scanner intercepts viruses before declude and
f-prot can catch
I would like to run Symantec Anti-Virus Corporate edition on our mail
server with its on access scanner to protect other file areas other than
the email going through it. I know problems would be encountered if the
on access scanner intercepts viruses before declude and f-prot can catch
10 matches
Mail list logo
