Title: New release
Hi,
Due to a minor inconvenience called Hurricane Jeanne, we have been offline for about 5 days now.
Can someone please tell me when the newest release was available for download?
Thanks,
Sharyn
Title: New release
Hi Sharyn,
Looks like it was yesterday.
Our office just came back online yesterday
afternoon as well. Hope you didn't have much damage.
Darin.
- Original Message -
From: Sharyn
Schmidt
To: [EMAIL PROTECTED]
Sent: Wednesday, September 29, 2004 9:04 AM
Subj
Declude Customers,
Today we have released Declude Version 1.80 which is available to all
customers with a Valid Service Agreement. Please log into your account
www.declude.com/myaccount.asp to download the latest version of the
software.
Some of the most recent enhancements include:
DECLUDE VIRU
I had a JPG held by declude as:
X-Declude-Virus: Detected [Microsoft GDIPlus.DLL JPEG Vulnerability].
However, this was a JPG sent from one of my users to another. I seriously
doubt it was infected with anything. The only thing was that it was sent
from a MAC.
User-Agent: Microsoft-Entourage/
I had a JPG held by declude as:
X-Declude-Virus: Detected [Microsoft GDIPlus.DLL JPEG Vulnerability].
However, this was a JPG sent from one of my users to another. I seriously
doubt it was infected with anything. The only thing was that it was sent
from a MAC.
User-Agent: Microsoft-Entourage/10
> I had a JPG held by declude as:
> X-Declude-Virus: Detected [Microsoft GDIPlus.DLL JPEG Vulnerability].
>
> However, this was a JPG sent from one of my users to another.
> I seriously doubt it was infected with anything. The only
> thing was that it was sent from a MAC.
After looking in t
For example there is a message showing up in the logfile as
09/29/2004 16:02:55 Qc07307e2007404eb [Microsoft GDIPlus.DLL JPEG
Vulnerability]
09/29/2004 16:02:55 Qc07307e2007404eb [Microsoft GDIPlus.DLL JPEG
Vulnerability]
09/29/2004 16:02:55 Qc07307e2007404eb [Microsoft GDIPlus.DLL JPEG
Vulnerabi
Thanks-
Both jpgs held were sent by the same person - a graphic designer using a
MAC. If that helps you change the code.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, September 29, 2004 10:52 AM
To: [EMAIL PROTECTED]
Sub
Sent a test message with jpg attached from Macintosh Entourage 11.0.0
(040405) and it was not caught.
Mike
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL
To keep it brief.
Scott has a new JPEG test in Ver. 1.80, but it appears to still have a
flaw.
(Stopping a FEW normal JPEGs, mostly from MACs.)
So, for the next few hours (days?), you can error on the side of
caution or risk.
But when it's fully ready, it's a must have update.
Greg
R. Scott
An explanation of why some needed the switch and
others may not have:
From: http://vil.nai.com/vil/content/v_128461.htm
The 4395 DAT files no longer require that McAfee anti-virus products are
configured to scan with program heuristics enabled to detect this
threat.
I have found 5 false positives over the last 24 hours. Arrghh! 3 came from a
local photographer sending photos to a local newspaper. FWIW, he was using
an Apple. The other 2 came from a user receiving pic's from
picturecd.kodak.com.
-M
- Original Message -
From: marc catuogno
To: [EMAIL
From: David Sullivan
Subject: Re[2]: [Declude.Virus] Request for per-domain configuration
Date: Wed, 31 Mar 2004 11:37:11 -0800
DC> Hmmm...I hate having to turn off the footer for everyone just because
of one
DC> customers. Haven't run into it yet myself, but some people on this
list
DC> will p
Could someone please explain what this Microsoft GDIPlus.DLL JPEG
Vulnerability is?
Are all JPEG's vulnerable or just some with a bad format?
The company I work for does a lot of graphics work and people email jpegs
around. A few have been caught and I'm trying to understand why. I'm
assuming (yes
The best writeup I have found so far is at
http://www.bleepingcomputer.com/forums/topict3077.html
BTW, while the bug is in the decoding of the jpeg files, the jpeg file can be renamed
to a variety of extensions and still activate the vulnerability. As such, the
following can be now considered
Could someone please explain what this Microsoft GDIPlus.DLL JPEG
Vulnerability is?
It is the most serious exploit ever discovered that viruses can use.
Specifically, it allows viruses to spread in JPEG files, something nobody
previously thought possible. Fortunately, it only can work on unpatch
Scott
Started to appear here in NZ now. We have just seen the first one sent by a
local person to a recipient using our server
It seems to me that if the PC is infected, that every jpg they send by email
also contains the vulnerability - correct?
Ta
Peter
-Original Message-
From: [EMA
> That's because Microsoft screwed up, and gave out an algorithm for
> detecting the exploit that has false positives. We plan to have full JPEG
> analysis soon, to work around this (with absolutely no code from Microsoft
> in it ).
Scott, I have seen some false positives in files that were creat
Scott, I have seen some false positives in files that were created-what not
on a PC, not on a MAC. Do you want a copy of these?
No. I expect that our algorithm will work perfectly.
-Scott
---
Declude JunkMail: The advanced anti-spam solution fo
It seems to me that if the PC is infected, that every jpg they send by email
also contains the vulnerability - correct?
It isn't yet known what viruses using this exploit may do. It might send
out E-mails directly, attach itself as JPEG files to E-mails being sent out
manually, etc.
> >Scott, I have seen some false positives in files that were created-what
not
> >on a PC, not on a MAC. Do you want a copy of these?
>
> No. I expect that our algorithm will work perfectly.
Shucks, too late. Just sent some to virus trap. ;)
What is interesting on the ones I sent is the heade
Ok...
Declude virus does the detection.
If a jpeg is attached/embedded in the email, the email will be flagged as
having the vulnerability whether it's actually infected or not.
Correct?
If the sending pc, it's dll's, and software are updated with Microsoft's
patch will the embedded jpg still
22 matches
Mail list logo
