David,
Is the built-in AVG affected by this?
http://secunia.com/advisories/25998/
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type
Scott,
I saw that clam was giving an error for max ratio and max space. I'm not
sure that clam understands those parameters anymore. But it does not cause
the scanner to error out.
Mark Reimer
IT System Admin
American CareSource
972-308-6887
_
From: [EMAIL PROTECTED] [m
I just upgraded to Clam av 0.90.2-1. It appears that three parameters that I
used per Scott's recommendation no longer work. Anyone else seeing this?
--mbox
--max-ratio
--max-space
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---
This E-mail came fro
Scott,
Where did you download the rsync for windows?
Mark Reimer
IT System Admin
American CareSource
972-308-6887
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, March 26, 2007 9:19 AM
To: Declude.Virus@declude.com
Subject
Gary,
I had the same problem after upgrading to 0.90.1-2. I had to go back to
0.90-1. I was getting the same error code. After this upgrade if I go back
to 0.90.1-1 I get error code 40. I have not been able to figure out what is
going on.
Mark Reimer
IT System Admin
American CareSource
972-308
Clam AV releases prior to 0.90 have Dos issues I believe. Is their a 0.90
release for windows?
Mark Reimer
IT System Admin
American CareSource
972-308-6887
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark
Reimer
Sent: Friday, February 16, 2007 10:06 AM
To
What is the current release of Clam AV for windows? I saw 0.90 stable is out
now.
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubs
What most people using to auto update Mcafee command line
scanner?
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubs
?
Thanks for any input.
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http:
Ok that’s what I have as well. I
know AVG has newer defs out so I wonder why we are not getting these from
Declude.
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent
What are the latest AVG updates that everyone has? I’m
worried that my AVG stopped updating for some reason. Or is it from Declude
moving all their stuff around?
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
---This E-mail came from the Declude.Virus
It has been 24 hours since my install and my AVG defs still
have not updated. I ran the authentication connection test and got back 1.1.1.1
so I should be good to go but I still don’t have any updates. Any ideas?
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
I'm also seeing 3 or 4 application errors a day.
I see the following in our event logs:
Faulting application decludeproc.exe, version 0.0.0.0, faulting module
decludeproc.exe, version 0.0.0.0, fault address 0x8cf6.
Any thoughts?
Mark Strother
Pacific Online
Phone: 604-638-6010 ext
have excluded the Imail directory from Symantec and Symantec reports that the
virus was found as a tmp file in c:\windows\temp directory. Symantec reports
the virus as W32 [EMAIL PROTECTED] Has anyone else seen this?
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
Thanks Andrew. I saw your message relating
to my question just after I sent the message. Sorry about that.
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Thursday
For the past week I have only seen my virus log show “could
not find parse string infection: in report.txt” for f-prot. I have not
made any changes to anything in weeks. Does f-prot show this when it does not
show the name of the virus?
Mark Reimer
IT Project Manager
American
I just
wanted to say thanks to everyone that shared their F-prot config and for the
explanation of the switches. It was very helpful!!
Mark ReimerIT Project ManagerAmerican
CareSource214-596-2464
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On
Behalf
After seeing Matt's response I'm curious what other users are using for
their F-prot switches. Some of the switches Matt uses seem like they should
be used but Declude does not include them in the config shown in their EVA
manual. What do the majority of you all use?
Mark Reimer
Matt,
My config is similar to yours except you have AI/Packed/SERVER. What are
the additional benefits to using these switches?
Mark ReimerIT Project ManagerAmerican
CareSource214-596-2464
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On
Behalf Of
You
can add 2 character extensions into Declude such as UU right? I know they had a
problem with this at some point.
Mark ReimerIT Project ManagerAmerican
CareSource214-596-2464
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On
Behalf Of MattSent
I'm
curious. Are people banning BHX, HQX, UUE, UU, and MIM since the
Kapser/Blackmal.E/MyWife.d virus hit? If so have you seen any negative effects
from doing this. I'm thinking of blocking them as well.
Mark ReimerIT Project ManagerAmerican
CareSource214-596-2464
-Origin
Should
we be blocking .mim file types? One of the new viruses that was blocked was a
.mim file type. What is it used for?
Mark ReimerIT Project ManagerAmerican
CareSource214-596-2464
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On
Behalf Of Markus
I think this started happening after I updated my F-prot virus defs to 16th.
Does anyone else see this?
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mark Reimer
Sent: Monday, January 16
I saw an entry in my virus log to day for [EMAIL PROTECTED] Has anyone else
seen this? I cannot find any information on it.
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
---
[This E-mail has been scanned for viruses]
---
[This E-mail was scanned for viruses by Declude EVA
Anyone seen this yet?
-0-
Expert: Microsoft TNEF flaw could lead to
superworm
By Bill Brenner, Senior News Writer10 Jan 2006 | SearchSecurity.com
IT administrators won't have much chance to breathe after deploying the patch
Microsoft rushed out last week
for the Windows Meta File (WMF) glitc
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Title: Microsoft Security Response Center Bulletin Notification
Issued: January 05, 2006
Summary
===
Importan
If we are banning extensions within zip files we should be ok right?
Mark Reimer
IT Project Manager
American CareSource
800-370-5994 ext. 267
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John T (Lists)
Sent: Tuesday, November 15, 2005 2:30 PM
To
How is everyone dealing with Adobe PDF's with embedded attachments?
Adobe PDF's with embedded attachments can be bundled and distributed as a
Secure Electronic Envelope (eEnvelope). eEnvelopes are designed to protect
documents in transit with the use of encryption.
Although Adobe recommends enabl
Will this version work with iMail as well?
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
> Sent: Friday, March 25, 2005 9:48 AM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Declude Update - Version 2.0.6
>
> We are i
rus Free [MIME: 1 883]
ONACCESS is set to OFF now
Thanks
Mark
System Administrator
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Friday, February 18, 2005 2:59 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-prot help
>This has been hash
:
[Declude.Virus] F-prot help
Mark,
When you say "on access is set to on" and then
below that you mentioned the realtime scanner was not installed. Do you
have an on access virus scanner running? Even one other than F-Prot that
may be scanning your server?
Title: F-prot help
This has been hashed out before and I checked the archive. I cannot get my installation of declude to work.
This is my config:
C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /DUMB REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
VIRUSCODE 8
REPORT Infe
We use AFT in all of our servers. How does this impact us?
Why not just do a web-based key generator and allow for two or three keys to
be generated.
Have the user enter the IP, machine name and MAC and then spit back a key.
If you exceed the number of keys then they need to call you.
Every time
Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Mark E. SmithSent: Monday, December 20, 2004
8:37 AMTo: [EMAIL PROTECTED]Subject:
[Declude.Virus] AVAFTERJM not working
I've been working with Darrell from Invariant systems using their lo
I've
been working with Darrell from Invariant systems using their log
utility.
We've
been running AVAFTERJM based on the following logic:
We
delete about 50% of email as spam via Junkmail (gateway system
only).
If we
delete 50% of the email then we can reduce the load on Declude/FProt AV
I have DELETEVIRUS = on
Because I don't want the \virus folder overflowing.
That's working except the BANEXT extensions that I have set (.scr, .pif,
etc)
Are being put in the \virus folder.
Is there a way to make DELETEVIRUS really delete ALL viruses?
---
[This E-mail was scanned for viruses b
Does anyone know of a reason why to scan PDF files?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The
That's nice and everything but it was much cheaper and
safer for me to put 4 Imail relayers acting as gateways in our DMZ than to
buy 4 additional licenses of Exchange.
Not to mention I'd have to extend the AD domain out to the
DMZ.
Remember most Exchange organizations put the stores and
f
I called Ipswitch this morning. After I let them have it they said that we
could continue with our subscription and they would offer hotfixes and
support.
Considering I don't need a support agreement to get hotfixes in the current
release and I never call tech support, I'm not going to renew.
This
LETEVIRUSES Not working.
>
> - Original Message -
> From: "Mark Smith" <[EMAIL PROTECTED]>
>
>
> > Any way to purge 'em all without writing a script?
> > We're running about 200k messages per day across 4 servers and don't
> bother
&g
Any way to purge 'em all without writing a script?
We're running about 200k messages per day across 4 servers and don't bother
to check them all.
Thanks!
Mark
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81
I have it set to:
DELETEVIRUSES ON
In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Group
> -
> - Original Message -
> From: "Mark Smith" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, October 18, 2004 3:56 PM
> Subject: RE: [Declude.Virus] Spool Dir
>
>
> > Ipswitch Imail has a command line utilit
Ipswitch Imail has a command line utility to do this.
http://support.ipswitch.com/kb/IM-19990629-DM06.htm
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
> Sent: Wednesday, October 13, 2004 1:15 PM
> To: [EMAIL PROTECTED]
> Subject: [Dec
Will the new version of Declude install by running the declude_setup.exe
properly or do we update the old fashion way?
Mark
---
[This E-mail scanned for viruses courtesy of Netslyder, Inc.(http://www.netslyder.net)]
---
[This E-mail was scanned for viruses by Declude Virus (http
When you release next fix, can you add the ability to disable this test from
inside of declude and rely on the AV software?
It killed our photos department yesterday... :)
Mark Smith
Associated Press
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROT
Is there a way for Declude to stop checking for the GDI Vulnerability and
rely on F-Prot?
I went to 1.8 and we found that MANY JPG photos were being caught as false
positives.
Mark Smith
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came
In theory we could block links to JPGs in HTML based email but that doesn't
help us with people just browsing the Internet.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Saturday, September 25, 2004 2:59 AM
> To: [EMAIL PROT
Actually this breaks Declude because Declude Virus can't look for multiple
REPORT lines.
Scott,
How can we setup Declude Virus to look for multiple lines in the report.txt
file?
Mark
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf
Just did some testing with the POC and noticed that Fprot now is adding a
new line to the report.txt:
e:\imail\test\poc.jpg Contains the exploit named W32/[EMAIL PROTECTED]
So I had to add the line:
REPORT Contains the exploit named
To my virus.cfg file.
My complete setup for F-Prot
Greg,
Here's a tool to scan everything on the machine:
http://isc.sans.org/gdiscan.php
Mark
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROT
Dave,
BANEXT JPG
Scott,
Here's the information about how to track the malformed header using SNORT.
http://isc.sans.org/diary.php?date=2004-09-23
Also some utilities on scanning your PC.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marche
What about just disabling Null senders in Imail?
Of course this means that most "Out of office" messages will not make their
way into your system but it takes the load off of Declude.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Donn Bly
> Sen
Do and did. Thanks...
Mark
At 04:42 PM 9/2/2004, you wrote:
I have the pro version. Where can I download the newest version?
If you have an up-to-date Service Agreement, you can get it from
http://www.declude.com/virus/manual.htm .
-Scott
Our IP or block got listed on this guys list. He doesn't provide
any information as to how the IP or block got listed and seems more
interested in taking money to have an IP de-listed. Wonder how long
it will take for him to tick off the wrong company.
It would be nice if Declude would remove B
I work with the Salvation Army here in Houston. They are always in
desperate need of updated computer equipment.
I introduced them to their first laser printers and thought they were
going to have a coronary over the LJ2s and LJ3s.
You can call Anne at 713-692-5209. Tell her that Mark from
Scott,
I'm seeing this is 1.77i27 also:
Declude 1.77i27 (C) Copyright 2000-2004 Computerized Horizons.
Diagnostics ON (Declude v1.77i27).
Declude JunkMail: Config file found (E:\imail\Declude\global.CFG).
Declude Virus: Config file found (E:\imail\Declude\Virus.CFG).
Declude Hijack:Not
Does anyone know if the F-Prot real time scanner relies on the NTFS Change
notification kernel driver?
Here's my problem... I use Microsoft Index Server for web indexing. Index
Server and ANY Antivirus software that uses the NTFS Change notification
journal do not work together.
You get index corr
> What they (M$) really need to do, is make windows update
> integrated into Windows, the problem is they tell you "Stay
> current with updates" in a little box above the taskbar when
There are huge debates about this. It's amazing that people are against
this.
Look at the newsgroups, etc...
http://www.washingtonpost.com/wp-dyn/articles/A32161-2003Aug22.html
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declud
The only reason that I'm posting this here is because the people on this
group seem to have a good skill set and knowledge about web
applications.
Please excuse the OT question...
I'm looking for a new ASP shopping cart system to install on my servers.
I don't want to integrate with someone else's
What's NT 4.0? :)
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Tony
> Gray - Network Administrator
> Sent: Thursday, December 19, 2002 9:35 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] F-Prot Updater via AT Scheduler Problem
>
>
FWIW,
Most of these programs won't work if there is a form that needs to
interact with the desktop.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett
> Sent: Thursday, December 12, 2002 1:41 PM
> To: [EMAIL PROTECTED]
> Subject: RE:
Why mess with DOS batch files?
Just write a VBScript file and use the FileScriptingObject.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of John Shacklett
> Sent: Thursday, December 12, 2002 1:00 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.V
Scott,
We have both Declude and JunkMail. Does it matter whether I download
declude updates from /virus or /junkmail?
Thanks.
Mark
At 08:47 AM 9/23/2002, you wrote:
>We have just released Declude Virus v1.61 (beta). See
>http://www.declude.com/virus/manual.htm . Changes include:
&g
ern (I wouldn't expect him to
say anything else).
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Mark Chadwick
> Sent: Wednesday, July 17, 2002 7:48 AM
> To: Declude. Virus@declude. com
> Subject: [Declude.Virus] Internet
re at remote sites and travel to Europe and the States and they need
internet access via landlines, local phone charges or preferably a flat
fee or yearly subscription.
Any input gratefully received,
Mark Chadwick
IT Support Engineer
Science International
UK
---
[This E-mail was scanned for virus
; Which config line are you interested in? The only unusual
> thing is that VIRUSCODE has to be set to 100 for the command
> line scanner inocmd32.exe.
>
>
> - Original Message -
> From: "Mark Smith" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
&
Has/is anyone using Computer Associates eTrust - InoculateIT Version 6.0
with Declude Virus?
If so what is the config line that you're using?
Thanks!
---
[This E-mail scanned for viruses by F-Proto Virus Scanner]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
Yes. Don't buy it. :)
What's your email address?
[EMAIL PROTECTED]
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
> Sent: Monday, June 24, 2002 1:49 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.Virus] Trend Micro
> Importance:
Great thanks!
Mark Chadwick
IT Support Engineer
Science International
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kami Razvan
Sent: 20 May 2002 12:27
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Upgrade link
Hi..
http://www.Declude.com
Can someone point me to the upgrade link? Why can't I find the link to
download the latest version from the declude.com site?
Mark Chadwick
IT Support Engineer
Science International
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came fro
Scott, I'm paranoid. I am only receiving 3 or 4 emails a day from this list
when I used to receive 20 - 30. Is it me or are things just quiet??
Mark Chadwick
IT Support Engineer
Science International
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf
*(This is from my network management in the US and they DON'T use Declude)
Thanks,
Mark Chadwick
IT Support Engineer
Science International
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscrib
declude -diag
Mark Chadwick
IT Support Engineer
Science International
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Michael Abbott
Sent: 29 January 2002 16:31
To: [EMAIL PROTECTED]
Subject: RE: DSN:Re: [Declude.Virus] MY Party not caught
I know I
server
and no log!?!?
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
Cambs
CB2 1LQ
+44(0)1223 326500
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
George how did you pull those stats together? Did you use the same log
analyser as mentioned in this list?
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
Cambs
CB2 1LQ
+44(0)1223 326500
-Original Message-
From: [EMAIL PROTECTED]
[mailto
Does anybody know if Norton Antivirus Enterprise works with Declude and are
there any hang ups with it?
Thanks in advance (as always!)
Mark Chadwick
IT Support Engineer
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-mail was scanned for viruses
In the declude.cfg look for;
SCANNERTIMEOUT 60
I think 60 is the default so if you increase this your scanner is allowed
more time to scan big files and thus eliminate your problem.
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Cheers Scott,
FYI >>> my Mcafee desktop AV flagged it and deleted it.
Has there been a problem with Mcafee not flagging this corrupt version of
Magistr?
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Tel: +44 (0)12
Why did this virus get past Declude!!??
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Tel: +44 (0)1223 326512
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Serg
What's TNEF!!??
Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ
Tel: +44 (0)1223 326512
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jerry Murdock
Sent: Friday, October 05, 2001 4:51
TOS or AUP that includes statements
about anti-virus protection?
Thanks,
Mark L. Holman
Director, Information Technology
Information Technology Builders, Inc.
(850) 269-1160 x115
[EMAIL PROTECTED]
http://www.itbinc.com
AIM: MLHITB
This E-mail came from the Declude.Virus mailing list. To
unsubscrib
83 matches
Mail list logo
