Yes.. I think another poster recommended adding Private.zip into the declude
virus.cfg file to block that attachment
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan
Sent: Wednesday, November 26, 2003 12:00 PM
To: [EMAIL PROTECTED]
Subject:
Hi;
I think this is
the one that was reported by Matt earlier..
Here is some
release..
http://www.eweek.com/article2/0,4149,1396835,00.asp?kc=EWNWS112603DTX1K599
The Trojan arrives in an e-mail with an attachment that is zipped and
contains an executable. The e-mail begins:
"Hello
Does anyone know what the command line string is for scanning your sig
file to see if it is catching a certain named virus file? I saw it posted
over 6 months ago, however, I guess my search isn't picking it up. Thanks,
F-Prot /VIRLIST (to display all viruses it knows of)
or
F-Prot /
perhaps you should include the virus.cfg (code
blanked out unless its directed to scott alone)A nice thing to check is
if the SMTP service sees "Declude.exe" as its executable.If not put it up
manually, check the registry (read the manual at http://www.declude.com/virus/manual.htm for
more d
However one of my colo customers purchased IMAIL and declude lite virus
version.
I set the server up just like mine but I keep getting an error when it
fires up.
declude.exe continues to say;
INSTALLING DECLUDE FOR THE FIRST TIME
INSTALLATION COMPLETE!
The above is written to the dec log file a
I've received an alert about a new virus (not a worm) intended to gain remote access
over a backdoor. The virus has no replication functionality but is send out like a
spam message directly to many many recipients.
In the meantime I reccomend to add a line
BANNAME private.zip
to your virus.cfg
I have declude running on my companies primary mail server and have
no problems what so ever with that install and config.
However one of my colo customers purchased IMAIL and declude lite virus
version.
I set the server up just like mine but I keep getting an error when it
fires up.
declude.e
I honestly have no clue. I force all my messages in textmode.
(makes this> NfÆçëyu u ×dj)jgnr[yX XX:Ëm ÛfÖÚyu *{nÇyu rzÇj j)ÃÈ
in
your sig alot more interesting lol)
But I wonder, shouldn't it be somewhere in the f-prot manual? Or there site?
D.C.
- Original Message -
From: "Kei
Does anyone know what the command line string is for scanning your sig file to see if
it is catching a certain named virus file? I saw it posted over 6 months ago,
however, I guess my search isn't picking it up. Thanks,
Keith
†+™¨¥Á,q©çy×è®ø«ºÇo Þr[yX«ºÈm¶ŸÿÃ
yÉnuç(™8b°IšŠW™çë¢kax7œ–ç^V
Tnx,
That explained alot. Silly names. >_<
I shall lookup more info on it once, when I have time. (lol.. thats gona be
a while) Sounds interesting to find out how it works. :)
Tnx again,
D.C.
- Original Message -
From: "Bonno Bloksma" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent:
Hi,
> To go OT a bit, what the hell is forging dns?
You know what a forging virus is?
> I know dns
And you know what dns is. Now of course you have heard of spammers and
probably also of dns blacklists? Well "The forging dns" is a dns-alike
server that keeps a list of virus names which are forg
Hy,
To go OT a bit, what the hell is forging dns?
I know dns but forging.. Probabaly something simple though. :P
D.C.
- Original Message -
From: "Bonno Bloksma" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "R. Scott Perry" <[EMAIL PROTECTED]>
Sent: Tuesday, November 25, 2003 9:09 PM
12 matches
Mail list logo
