RE: [Declude.Virus] How do i do this

2003-10-28 Thread ISPhuset Nordic / Benny Samuelsen
Ok and that will be released ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 28. oktober 2003 14:42 To: [EMAIL PROTECTED] >I want to send a spesial message when an outlook vulnerability occurs >to the receiver of the mail With a

RE: [Declude.Virus] How do i do this

2003-10-28 Thread R. Scott Perry
Ok and that will be released ? It's now available as an interim release (1.76i15) at http://www.declude.com/release/176i/declude.exe . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches kno

RE: [Declude.Virus] IMail server Memory Dump.

2003-10-28 Thread Link Brokers Support
IM running 1.65 Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 -Original Message- F

[Declude.Virus] Ipswitch removed link til declude and other 3. party

2003-10-28 Thread ISPhuset Nordic / Benny Samuelsen
Last time i was on the web pages for Imail there where a page of third party tools Loganalyzeres and declude and so on, but now I only find 3 links there and all of them looks like close companies to Ipswich. Is this a new policy or have I just blind ? Anyone have the link for the virusloganalyz

Re: [Declude.Virus] Ipswitch removed link til declude and other 3. party other 3. party

2003-10-28 Thread R. Scott Perry
Last time i was on the web pages for Imail there where a page of third party tools Loganalyzeres and declude and so on, but now I only find 3 links there and all of them looks like close companies to Ipswich. Is this a new policy or have I just blind ? Anyone have the link for the virusloganal

[Declude.Virus] Zip vulnerability

2003-10-28 Thread Craig Gittens
Does Declude recognize the zip vulnerability where a zip file contains 5 other zip files each of which contain a further 5 zip files which ALL contain 400MB files? So about 10GB of zipped files that zips down to 5kb I really don't want to test it on my live server but I have such a file.

Re: [Declude.Virus] Zip vulnerability

2003-10-28 Thread Bill Landry
I think it depends on your virus scanner, but I believe that most virus scanners will now detect the zip of death. Bill - Original Message - From: "Craig Gittens" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 28, 2003 11:52 AM Subject: [Declude.Virus] Zip vulnerabilit

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
Hi Scott, We have re-installed F-Prot and we continue to have the same issue. We execute declude.exe and restart SMTP service - once we do that we get a ton of unknown virus alerts and in the system process there is about 20 declude.exe running. What could be causing this? Thanks, CM -Orig

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
Not sure if Scott is still around, so if you want, do the following: Go to command prompt: Change to the Imail directory. Type exactly without the quotes, "Declude -daig >c:\declude.txt" Send that file along with your virus.cfg file zipped to Scott, the list or me if you like, and it will be revi

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread R. Scott Perry
We have re-installed F-Prot and we continue to have the same issue. We execute declude.exe and restart SMTP service - once we do that we get a ton of unknown virus alerts and in the system process there is about 20 declude.exe running. What could be causing this? What does the Declude Virus log

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 7:06 PM To: [EMAIL PROTECTED] Sub

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread R. Scott Perry
Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILE

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing th

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Rick Klinge
Is this true for the DOS version of f-prot too? ~Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 6:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus >Thanks for the he

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread R. Scott Perry
Is this true for the DOS version of f-prot too? F-Prot.exe (the 16-bit program which comes with both the DOS and Windows version of F-Prot) requires the /NOFLOPPY and /NOBOOT switches. fpcmd.exe (the 32-bit program which just comes with the Windows version of F-Prot) should not use /NOFLOPPY or

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread R. Scott Perry
We made those changes to the cfg, and the same issue happens again... That means that you had more than one problem before. What exactly does the SCANFILE line look like now? What warnings/errors appear in the \IMail\spool\vir.log file? -S

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
Scott, Attached is the log file from today for your review... Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 8:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Viru

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
Rerun the output file. You forgot the -diag. You must open a command prompt and change to the imail directory. CD C:\Imail Declude -diag >c:\declude.txt John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
Also, add VIRUSCODE 8 to the virus.cfg file please. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Web Administrator > Sent: Tuesday, October 28, 2003 5:24 PM > To: [EMAIL

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
My apologies, I copied the wrong file. The correct file is attached. Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
Please put the log into debug mode, run some through, then zip the log and send please. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Web Administrator > Sent: Tuesday, Oct

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
Thanks for your help John. How do we put the log into debug mode? Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 10:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing t

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
In the virus.cfg file, near the top, there is a line like this: LOGLEVEL LOW Change that to LOGLEVEL DEBUG. Let it run for a bit and then change back. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [E

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread Web Administrator
John, Attached is the file for your review - we ran declude for about 2 min. It almost crashed the iMail server. Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 11:14 PM To: [EMAIL PROTE

RE: [Declude.Virus] containing the Unknown Virus

2003-10-28 Thread John Tolmachoff \(Lists\)
10/28/2003 23:30:36 Q5532251336c 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external ("on access") virus scanner. 10/28/2003 23:30:36 Q553232c3244 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external ("on access") virus scanner. 10/28/2003

[Declude.Virus] IMail server Memory Dump.

2003-10-28 Thread Link Brokers Support
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) I'm getting a problem every 6 -7 hours. I'm using the latest version of I mail on Windows server 2000 with all the latest MS patches. Declude version IM not sure. How

Re: [Declude.Virus] IMail server Memory Dump.

2003-10-28 Thread R. Scott Perry
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM no