Re: [Declude.Virus] New Errors under Imail 8.03

2003-10-24 Thread R. Scott Perry
> It seems to only affect servers with a high volume of mail (several > thousand E-mails per hour). Does 1-2k per hour qualify as "several thousand"? What really matters is the quantity of E-mail in a very short time period. You could probably have 10,000 per hour if they are spaced evenly. But

Re: AW: [Declude.Virus] New Errors under Imail 8.03

2003-10-24 Thread R. Scott Perry
i think it is not a problem of imail 8.*. we use imail 7.* an we get those errors too. the volume of mail seems to be connected to the problem, we only see them when more then 500 mails comming in nearly the same time. right now we think the problem is connected to the hd-accesstime. The "Error 1

AW: AW: [Declude.Virus] New Errors under Imail 8.03

2003-10-24 Thread Guhl, Markus (LDS)
hi, yes its error 183. here is a part from the viruslog: 10/22/2003 15:04:54 Q7f90072a007200cc Error 183 creating temp directory F:\IMail\spool\D7f90072a007200cc.vir\. 10/22/2003 15:04:54 Q7f90072a007200cc Scanned: Error starting scanner 10/22/2003 15:04:55 Q7f90072b007201b7 Scanned: Virus Free [M

RE: [Declude.Virus] New Errors under Imail 8.03

2003-10-24 Thread Danny Klopfer
I took the plunge early this morning and upgraded to Imail 8.03 and on a new (faster) server. So far all is well. My CPU usage has dropped a lot. It was hitting 100% a lot with 60+ processes. So far the processes have stayed below 40 with the CPU usage being a lot more stable. Now I just have

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread John Tolmachoff \(Lists\)
Have you done a complete virus scan? If it is a virus, by far not all virus are e-mail borne. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Link Brokers Support > Sent: Fr

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread John Tolmachoff \(Lists\)
http://filext.com/detaillist.php?extdetail=mpr&Submit2=Go%21 FoxPro http://filext.com/detaillist.php?extdetail=qin&Submit2=Go%21 Unknown John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED]

[Declude.Virus] Backdoor.Coreflood Virus new variant?

2003-10-24 Thread Jim Matuska
Does anyone know whether the new variant of the Backdoor.Coreflood is detected with F-Prot? We have the latest version of virus definitions for F-Prot, but one of our users received this virus and it looks like it may have come through email. Has anyone ran into the new variant of this virus? It

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread Jeff Maze - Hostmaster
What's weird is that it also appears as though the same thing happened with the Half-Life 2 code. "E-mail was acting strange" and then a portion of the code was stolen. I wonder if it was a Microsoft product that this person (that working on the Half-Life 2 code) was using. -Original Messag

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread Jeff Maze - Hostmaster
http://story.news.yahoo.com/news?tmpl=story&cid=569&ncid=738&e=3&u=/nm/20031 023/tc_nm/media_videogames_halflife2_dc --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread Tandem Group
QIN and MPR files appear to be QucikBooks upgrade files. Do you have anything set to do an automatic upgrade from QB? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Link Brokers > Support > Sent: Friday, October 24, 2003 08:50 > To: Declude Virus; Decl

[Declude.Virus] New italian virus ?

2003-10-24 Thread Piero
Hi, First sorry for my bad english... I've received a mail which contain the follow italian text: Subject: Il momento è catartico "Ricevo e cortesemente inoltro, un premio per la genialità hanno reso mitico un salva schermo scaricalo, "poesie catartiche", che non sai cosa ti perdi ciao" The

Re: [Declude.Virus] New italian virus ?

2003-10-24 Thread Jim Matuska
A couple things, first F-Prot and declude on your mail server would not block the virus, since if I read your message right is linked to a website and not sent as an attachment. I can think of a couple options for this though. First, you could setup a rule in imail to delete or forward to an admi

RE: [Declude.Virus] New italian virus ?

2003-10-24 Thread Markus Gufler
Ciao Piero, > I've received a mail which contain the follow italian text: > Subject: Il momento è catartico > > "Ricevo e cortesemente inoltro, un premio per la > genialità hanno reso mitico un salva schermo scaricalo, > "poesie catartiche", che non sai cosa ti perdi Important!! 1.) As I

Re: [Declude.Virus] New italian virus ?

2003-10-24 Thread Piero
Yes, Sorry for very stupid question... How can F-prot block a simple email message with a link ? My big error... :-( Ok for Imal rules and firewall tips... But I manage domain for other customer and they use they own connection to internet, so I can block IP on firewall. Can I use Declude Virus