[Declude.Virus] [11]Please protest the CRTC ruling allowing Internet rates to rise significantly at a time when we are all using more and more

2011-01-31 Thread Harry Vanderzand
Given the recent CRTC ruling, Bell Canada is allowed to increase wholesale
residential rate by charging usage billing over a set limit.

 

Although it will not affect about 70% of accounts, it is the 30% that will
get seriously affected.  My apologies if I have contacted some of you twice.
I just want to be sure that as many people as possible do as much as
possible to stop this CRTC decision.  One of the purposes of regulation is
to make sure that the monopolies and oligopolies do not take over everything
and thus eliminate small business and victimize clients through exorbitant
rates for a service that you cannot get elsewhere.  Canada's internet rates
are among the highest in the world!  And they will be higher soon.

 

It may still be possible for the government to reverse its decision.  Please
check to following site for suggestions as to how you can protest the ruling
by CRTC.

 

 

 

http://openmedia.ca/meter

 

http://www.antiubb.com/

 

 

 

Thank you

 

Please note our new Address

 

Harry Vanderzand

Intown Internet

740 Erbsville Road

Waterloo, On, N2J 3Z4

519-741-1222

 

DISCLAIMER: The information in this message is confidential and may be
legally privileged. It is intended solely for the addressee. Access to this
message by anyone else is unauthorised. If you are not the intended
recipient, any disclosure, copying,or distribution of the message, or any
action or omission taken by you in reliance on it, is prohibited and may be
unlawful. Please immediately contact the sender if you have received this
message in error. Thank you. 

 

 




---
[This E-mail was scanned by Declude]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

[Declude.Virus] embedded AVG issue

2010-05-07 Thread Harry Vanderzand
I though I would check my virus logs which I have not done for a while.

 

It is not working.

 

See log entry:

05/07/2010 14:06:13.502 qb42e00250010.smd Scanned: Virus Free [MIME: 1
125]

05/07/2010 14:06:18.720 q990400280052.smd Vulnerability flags = 862

05/07/2010 14:06:18.814 q990400280052.smd Error: Could not start AVG
Instance (17)

05/07/2010 14:06:18.814 q990400280052.smd Scanned: Virus Free [MIME: 2
1293]

 

What could be the issue here?

 

Thank you

 

Please note our new Address

 

Harry Vanderzand

Intown Internet

740 Erbsville Road

Waterloo, On, N2J 3Z4

519-741-1222

 

DISCLAIMER: The information in this message is confidential and may be
legally privileged. It is intended solely for the addressee. Access to this
message by anyone else is unauthorised. If you are not the intended
recipient, any disclosure, copying,or distribution of the message, or any
action or omission taken by you in reliance on it, is prohibited and may be
unlawful. Please immediately contact the sender if you have received this
message in error. Thank you. 

 

 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] Database error after upgrading

2009-07-03 Thread Harry Vanderzand
I paid for it yesterday at 4pm and have not received anything yet.

How do I get the software etc?

Thank you

Harry Vanderzand
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222


-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: June-25-09 3:26 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Database error after upgrading


Declude has never had support for reading the SQL database in Imail. I don't
know your setup, but many times based on the registry, Declude would be
using the old system either the txt file or the later MS Access DB. We are
now adding the addition SQL, which should be available pretty soon.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com




-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kevin
Rogers
Sent: Thursday, June 25, 2009 3:19 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Database error after upgrading

1. We've been using MS SQL Server for years for our user/mailbox list 
(using the External Database option in Imail).  Which database are you 
referencing?  The user list database, or the contact database?  There 
weren't any changes to the user SQL Server database tables in Imail 11 
as far as I know.  And if you're referencing the contact database, why 
would that affect AUTOWHITELIST?

2. Great.  I hope a fix comes out soon.  The lack of the AUTOWHITELIST 
combined with two tests that add up to close-to-threshold weights caused 
a lot of legit email to be put into our bulk folders.

Kevin



David Barker wrote:
 Hi Kevin.

 1. If you are using the IMail MS SQL database this is different to their
 previous version MS Access database, we are in the process of coding and
 testing for Declude using MS SQL to use AUTOWHITELIST. I am not sure if
you
 have the option to use the old MS Access database in Imail or if it is
just
 MS SQL, if you can use MS Acccess then Declude AUTOWHITELIST will work or
 you have to wait for our release.

 2. We are currently also looking into this issue to determine what exactly
 is causing this and if it is legitimate or a problem with IMail new
format.


 David Barker
 VP Operations Declude
 Your Email security is our business
 978.499.2933 office
 978.988.1311 fax
 dbar...@declude.com



 -Original Message-
 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kevin
 Rogers
 Sent: Thursday, June 25, 2009 2:35 PM
 To: declude.virus@declude.com
 Subject: Re: [Declude.Virus] Database error after upgrading

 So I emailed David about this issue and he had me turn off AUTOWHITELIST 
 and that seemed to get rid of the error.  It seems that Imail 11 changed 
 the database it uses for contacts and this is why Declude was generating 
 that error. 

 But I'd really like to turn AUTOWHITELIST back on. 

 And, since the upgrade all emails are failing the DYNHELO and HELOBOGUS 
 tests so I've had to reduce their weights for the time being.  Has 
 anyone seen this or have any ideas how to correct?

 Thanks.


 Kevin Rogers wrote:
   
 I upgraded to 4.6.35 because of the AVG scanner issue, but now in my 
 declude logs I am seeing error messages like this:

 06/23/2009 00:38:48.986 q8f0c00670096.smd DataBase Error = 
 ['(unknown)' is not a valid path.  Make sure that the path name is 
 spelled correctly and that you are connected to the server on which 
 the file resides.
 Driver's SQLSetConnectAttr failed
 ]

 I didn't have these errors before my upgrade.  Any ideas?



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



 



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



   



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Database error after upgrading

2009-07-03 Thread Harry Vanderzand
Sorry I just saw the e-mail

Thank you

Harry Vanderzand
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222


-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: June-25-09 3:26 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Database error after upgrading


Declude has never had support for reading the SQL database in Imail. I don't
know your setup, but many times based on the registry, Declude would be
using the old system either the txt file or the later MS Access DB. We are
now adding the addition SQL, which should be available pretty soon.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com




-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kevin
Rogers
Sent: Thursday, June 25, 2009 3:19 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Database error after upgrading

1. We've been using MS SQL Server for years for our user/mailbox list 
(using the External Database option in Imail).  Which database are you 
referencing?  The user list database, or the contact database?  There 
weren't any changes to the user SQL Server database tables in Imail 11 
as far as I know.  And if you're referencing the contact database, why 
would that affect AUTOWHITELIST?

2. Great.  I hope a fix comes out soon.  The lack of the AUTOWHITELIST 
combined with two tests that add up to close-to-threshold weights caused 
a lot of legit email to be put into our bulk folders.

Kevin



David Barker wrote:
 Hi Kevin.

 1. If you are using the IMail MS SQL database this is different to their
 previous version MS Access database, we are in the process of coding and
 testing for Declude using MS SQL to use AUTOWHITELIST. I am not sure if
you
 have the option to use the old MS Access database in Imail or if it is
just
 MS SQL, if you can use MS Acccess then Declude AUTOWHITELIST will work or
 you have to wait for our release.

 2. We are currently also looking into this issue to determine what exactly
 is causing this and if it is legitimate or a problem with IMail new
format.


 David Barker
 VP Operations Declude
 Your Email security is our business
 978.499.2933 office
 978.988.1311 fax
 dbar...@declude.com



 -Original Message-
 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kevin
 Rogers
 Sent: Thursday, June 25, 2009 2:35 PM
 To: declude.virus@declude.com
 Subject: Re: [Declude.Virus] Database error after upgrading

 So I emailed David about this issue and he had me turn off AUTOWHITELIST 
 and that seemed to get rid of the error.  It seems that Imail 11 changed 
 the database it uses for contacts and this is why Declude was generating 
 that error. 

 But I'd really like to turn AUTOWHITELIST back on. 

 And, since the upgrade all emails are failing the DYNHELO and HELOBOGUS 
 tests so I've had to reduce their weights for the time being.  Has 
 anyone seen this or have any ideas how to correct?

 Thanks.


 Kevin Rogers wrote:
   
 I upgraded to 4.6.35 because of the AVG scanner issue, but now in my 
 declude logs I am seeing error messages like this:

 06/23/2009 00:38:48.986 q8f0c00670096.smd DataBase Error = 
 ['(unknown)' is not a valid path.  Make sure that the path name is 
 spelled correctly and that you are connected to the server on which 
 the file resides.
 Driver's SQLSetConnectAttr failed
 ]

 I didn't have these errors before my upgrade.  Any ideas?



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



 



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



   



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Declude Virus inoperable for 13% of the year?

2009-06-03 Thread Harry Vanderzand
I agree with everything except point C.  You are already being paid for this
and it does not take a new hire to handle it. 

 

Proper procedures should prevent an incidence like this.  

 

I gather that you are frustrated David by the tone of point C.

 

Rest assured that most of us are quite happy with the service and we
understand that stuff happens.  We all strive to be perfect, but every once
in a while we are reminded that we are not.

 

 

Thank you

 

Harry Vanderzand

Intown Internet

117 Ruskview Road

Kitchener, ON, N2M 4S1

519-741-1222

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: June-03-09 11:07 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Declude Virus inoperable for 13% of th year?
Sensitivity: Personal

 

Andy,

 

a.   Declude Virus does not have a built in system to report this error
as with this specific example. What happened here is not the norm but an
exception.  It was not our choice to hard code the expiration date but a
requirement from AVG. In this instance the specific persons who we had been
working with at AVG are no longer with the company and the process of having
this renewed took longer than usual. 

 

b.  I am not sure if you are being facetious, but if it makes you feel
better, sure you can schedule a reminder for me,  please email me at least 3
month prior of the new expiration date 2010-12-31 

 

c.   Yes AVG was not working as it should have been since 2009-04-10 I
agree with you -  this is totally unacceptable, intolerable, painful and
should not be brushed aside lightly. You are correct in your observations,
we should increase our prices dramatically so we can hire more developers to
ensure unfortunate incidents like this don't happen again.  Considering the
market and what other vendors charge how much more are you prepared to pay
for your service agreement so that we can meet this type of requirement ?

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 mailto:dbar...@declude.com dbar...@declude.com

 

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Wednesday, June 03, 2009 9:08 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] Declude Virus inoperable for 13% of th year?
Importance: High
Sensitivity: Personal

 

Hi,

 

Dave - so now that we have a working Declude Virus again, what can be done
to prevent this from recurring.

 

a)   Apparently Declude Virus has no error tracking in place at all -
otherwise it would have REPORTED to us (or your own Declude to your own mail
server) that the AVG API was no longer performing scans?

 

b)   Do the customers need to set a follow-up reminder for December
2010, which is when your new renewed AVG license will expire?

 

The old DecludeProc had THIS AVG License String:

 

LicBeg, Ver=1.0, Name=Declude, Exp=2009-04-10

 

So this implies, that the product was inoperable since April 10th for every
customer because Declude didn't obtain a new annual AVG license and had to
wait a few days for this transaction to complete? That means the product
was unusable for 13% of the year?

 

This can't just be brushed aside quietly. 

 

Best Regards,

Andy 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] Release 4.3.14 and 3.1.3

2006-09-28 Thread Harry Vanderzand
When I go to download I get 437???

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Barker
 Sent: Thursday, September 28, 2006 11:39 AM
 To: declude.junkmail@declude.com; declude.virus@declude.com
 Subject: [Declude.Virus] Release 4.3.14 and 3.1.3
 
 Declude Security Suite 4.3.14
 ---
 DEC   ADD BANCHARSET defined in the declude.cfg quarentines listed
 character sets Example:
 
 BANCHARSET   iso-2022-jp
 BANCHARSET   koi8-r
 
 EVA   ADD With AVAFTERJM ON the JM Log displays message 
 moved to virus
 folder
 
 JMADD Spam checking for inbound/outbound scanning can 
 be turned
 on/off. Located as a directive in the global.cfg file, below 
 are the default settings.
 
 OUTBOUNDSCANNINGSPAMOFF
 INBOUNDSCANNINGSPAM ON
 
 JMFIX IPBYPASS now takes place before WHITELIST
 
 JMFIX Using HOLD action in the $default$.junkmail file, if an
 extra space was after %DATE% incorrect behaviour was 
 observed, this is not been normalized
 
 JMFIX X-COUNTRYCHAIN log entry no longer truncated
 
 JMFIX DELETE_RECIPIENT removes the specified email address as
 per-user action only
 
 DEC   FIX On occasion ZEROHOUR initialized two overlaping threads
 causing decludeproc crash
 
 HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
 
 Declude Security Suite 3.1.3
 ---
 SMFIX Decludeproc will not start without a valid 
 domainlist.xml
 
 HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
 
 JMFIX Declude crash fix. Buffer Overflow reading the 
 From: line in
 the Headers
 
 JMFIX With HOLD if extra space after %DATE% incorrect 
 behaviour
 was observed this is not been normalized
 
 David Barker
 Director of Product Development
 Your Email security is our business
 978.499.2933 office
 978.988.1311 fax
 [EMAIL PROTECTED]
 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 
 




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Ping

2006-08-11 Thread Harry Vanderzand
Pong

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Barker
 Sent: Friday, August 11, 2006 11:31 AM
 To: declude.virus@declude.com; declude.junkmail@declude.com
 Subject: [Declude.Virus] Ping
 
 Ping
 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 
 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Growing Pains

2006-06-13 Thread Harry Vanderzand
Thank you for the communication.  Yes many of us have come to expect a lot
but I also think many of us have been around long enough to know that things
happen.  I have not appreciated some of the negativity on the list in the
last while.  I prefer it to be more constructive.  To that end there are
many understanding users who contribute a lot to this list and I appreciate
them also.  Rather than engage the fire and brimstone I see at time I bite
my tongue and just let it go.  Yelling and screaming just does not produce
sweet results.

Overall I am happy with the product and has worked very well for me.  Yes
the current bug is letting some more spam through.  I am sure that Declude
hates that more than me and is doing everything they can.  Wouldn't any of
the users do that if they were in the same situation with their clients?
And you can bet we all get there from time to time.  It's how we deal with
it that counts. 

Looking forward to the next patch and the further development of the
product.

I like the whole gui method of handling things.  Unfortunately I cannot use
it yet because I just do not have the time to make the switch.  I wish for a
conversion routine that would convert all me files to be compatible with the
gui.  That would go a long way to improving my life.  Besides being a good
product at capturing spam it is also important that the amount of time we
spend managing it be minimized

There's my two cents worth 

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Barker
 Sent: Tuesday, June 13, 2006 6:59 PM
 To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
 Subject: [Declude.Virus] Growing Pains
 
 To all Declude users:
 
 I wanted to send out a message to address some of the 
 concerns being raised by our user base. Before I get down to 
 specifics, let me give you some information about the general 
 direction of the company.  
 
 Declude is still a small company. Like any business, we want 
 to grow, create better products, keep you our customers happy 
 and enjoy what we do. Growth requires a certain amount of 
 change. In our case that means hiring a number of new people 
 to expand our customer support group and provide better 
 service. It means looking for new partners such as AVG and 
 CommTouch to make our software work even harder as security 
 threats become faster and more sophisticated. It means 
 finding a bigger, more productive space to work in.
 And it means that we need to explore opportunities to make 
 our products available to more people.
 
 Trying to accomplish many of those things inevitably leads to 
 making a few mistakes. Frankly, we made some seriously dumb 
 ones over the last few weeks and we apologize for any 
 problems we may have caused. Despite some of these 
 unintentional screw ups, we still know who we are. Scott 
 Perry established Declude as small company that really 
 listened to its users and created flexible, powerful 
 solutions that allowed them to customize Declude for their 
 individual needs. It was also a company that was responsive 
 to its users. Despite a momentary hiatus, that is the Declude 
 that you will see again, and very soon.
 
 Now, on to specifics:
 
 Q - Why have we been so slow to respond to tech requests?
 
 A:  Ironically, in an effort to expand both tech support and 
 engineering to deliver faster response and better solutions 
 we have expanded staffing in both areas significantly. We all 
 know that that our software is powerful, but it's also 
 complex and takes time to truly master its nuances.  We 
 underestimated the time it would take and the resources 
 required to get our
 people in both areas up to speed.   Our mistake.  We are now 
 past that area
 of concern and ready to be responsive to your needs.
 
 Q. - Are there issues or problems with the product?  
 
 A. -  No, just the opposite.  The fact of the matter is we 
 are working aggressively to offer an industry leading, fully 
 integrated solution that is both powerful and affordable.  
 The AVG announcement is one example as is our upcoming 
 addition of Commtouch to that suite is another. Integrating 
 those solutions, while expanding staffing, moving and 
 training was a result of biting off a bit more than we could 
 chew at once. Timing was hardly perfect, but we have 
 finalized the CommTouch integration and learned some hard 
 lessons in the process.
 
 Like it or not, when small companies make mistakes, they 
 really stand out.
 I guess for a few weeks we forgot that we are a small company 
 and that we, like many of you, have limitations. You have our 
 word that we will go above and beyond to make Declude a 
 company you can depend on. Thanks for your patience.
 
 Q - It seems some people have left the company that we were 
 used to communicating with.  Why has Declude been silent on 
 those departures. 
 
 A - The short

[Declude.Virus] abandoned directories with Clam for windows

2006-04-05 Thread Harry Vanderzand




I have found that 
when the server is processing a high volume a much greater amount of .vir 
directories get left behind than if the server would take more time to process 
the mail

Because I just had 
the decludeproc.exe stopped I got a backlog of 500 e-mails. When I started 
it again in processed these in about one minute and left 50 .vir directories 
behind

During regular 
processing when there is no backlog this amount of mail would have come in over 
5 - 10 minutes and would have left maybe only one .vir 
directories.

I am hoping that 
this gives some clues to somebody as to how this problem might be 
resolved.

thank 
you
Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222



RE: [Declude.Virus] ClamAV leaving locked files?

2006-03-09 Thread Harry Vanderzand
Any one have an idea on this one yet?

I am getting all kinds of .vir directories left in my work folder that I
cannot delete.  access denied, source file may be in use

It is the result of adding clamav as my second scanner

Any help would be greatly appreciated

Thank you

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
 Sent: Wednesday, March 08, 2006 1:35 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] ClamAV leaving locked files?
 
 Me too!
 
 I have the same issue and have been trying to figure out 
 what's going on
 
 Harry Vanderzand
 inTown Internet  Computer Services
 519-741-1222
 
 
  
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
  Sent: Wednesday, March 08, 2006 1:27 PM
  To: Declude.Virus@declude.com
  Subject: [Declude.Virus] ClamAV leaving locked files?
  
  I have a problem with ClamAV apparently leaving locked pdf files 
  behind. I get these messages the the virus log:
  
  03/08/2006 11:50:34.721 262309704382 WARNING: Couldn't remove .vir 
  directory
  e:\SmarterMail\Spool\proc\work\262309704382.vir\: EXTRA 
 FILES THERE. 
  [145] Error String: [The directory is not empty.]
  03/08/2006 11:50:34.721 262309704382 Likely problem: Your virus 
  scanner is leaving extra files/directories behind, so Declude can't 
  delete the directory.
  
  The files that are remaining are named 0.pdf or 1.pdf. 
  Any ideas where these are coming from? Why are they staying behind 
  after clam finishes?
  What's locking them?
  
  Using the newest versions of all, SmarterMail, clamav, and Declude 
  Virus/Junkmail.
  
  _
  Ken Weise
  Econocaribe Consolidators, Inc.
  2401 NW 69th ST * Miami, FL 33147
  (p) 305.693.5133  *  (f) 305.894.3666
  
  ---
  [This E-mail scanned for viruses by Declude EVA]
  
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, 
  just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ClamAV leaving locked files?

2006-03-09 Thread Harry Vanderzand
Noticed the following in my logs

What is happening here???

It does not happen for every virus check, just some

03/09/2006 16:39:55.671 qa08b02cc0e00.smd WARNING: Couldn't remove .vir
directory D:\IMail\spool\proc\work\Da08b02cc0e00.vir\: EXTRA FILES
THERE. [145] Error String: [The directory is not empty.]
03/09/2006 16:39:55.671 qa08b02cc0e00.smd Likely problem: Your virus
scanner is leaving extra files/directories behind, so Declude can't delete
the directory.
03/09/2006 16:39:55.671 qa08b02cc0e00.smd Scanned: Virus Free 

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
 Sent: Thursday, March 09, 2006 3:22 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] ClamAV leaving locked files?
 
 Any one have an idea on this one yet?
 
 I am getting all kinds of .vir directories left in my work 
 folder that I cannot delete.  access denied, source file may 
 be in use
 
 It is the result of adding clamav as my second scanner
 
 Any help would be greatly appreciated
 
 Thank you
 
 Harry Vanderzand
 inTown Internet  Computer Services
 519-741-1222
 
 
  
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Harry 
 Vanderzand
  Sent: Wednesday, March 08, 2006 1:35 PM
  To: Declude.Virus@declude.com
  Subject: RE: [Declude.Virus] ClamAV leaving locked files?
  
  Me too!
  
  I have the same issue and have been trying to figure out 
 what's going 
  on
  
  Harry Vanderzand
  inTown Internet  Computer Services
  519-741-1222
  
  
   
  
   -Original Message-
   From: [EMAIL PROTECTED] 
   [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
   Sent: Wednesday, March 08, 2006 1:27 PM
   To: Declude.Virus@declude.com
   Subject: [Declude.Virus] ClamAV leaving locked files?
   
   I have a problem with ClamAV apparently leaving locked pdf files 
   behind. I get these messages the the virus log:
   
   03/08/2006 11:50:34.721 262309704382 WARNING: Couldn't 
 remove .vir 
   directory
   e:\SmarterMail\Spool\proc\work\262309704382.vir\: EXTRA
  FILES THERE. 
   [145] Error String: [The directory is not empty.]
   03/08/2006 11:50:34.721 262309704382 Likely problem: Your virus 
   scanner is leaving extra files/directories behind, so 
 Declude can't 
   delete the directory.
   
   The files that are remaining are named 0.pdf or 1.pdf. 
   Any ideas where these are coming from? Why are they 
 staying behind 
   after clam finishes?
   What's locking them?
   
   Using the newest versions of all, SmarterMail, clamav, 
 and Declude 
   Virus/Junkmail.
   
   _
   Ken Weise
   Econocaribe Consolidators, Inc.
   2401 NW 69th ST * Miami, FL 33147
   (p) 305.693.5133  *  (f) 305.894.3666
   
   ---
   [This E-mail scanned for viruses by Declude EVA]
   
   
   ---
   This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.The archives can be found
   at http://www.mail-archive.com.
   
   
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, 
  just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ClamAV leaving locked files?

2006-03-08 Thread Harry Vanderzand
Me too!

I have the same issue and have been trying to figure out what's going on

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
 Sent: Wednesday, March 08, 2006 1:27 PM
 To: Declude.Virus@declude.com
 Subject: [Declude.Virus] ClamAV leaving locked files?
 
 I have a problem with ClamAV apparently leaving locked pdf 
 files behind. I get these messages the the virus log:
 
 03/08/2006 11:50:34.721 262309704382 WARNING: Couldn't remove 
 .vir directory
 e:\SmarterMail\Spool\proc\work\262309704382.vir\: EXTRA FILES 
 THERE. [145] Error String: [The directory is not empty.]
 03/08/2006 11:50:34.721 262309704382 Likely problem: Your 
 virus scanner is leaving extra files/directories behind, so 
 Declude can't delete the directory.
 
 The files that are remaining are named 0.pdf or 1.pdf. 
 Any ideas where these are coming from? Why are they staying 
 behind after clam finishes?
 What's locking them?
 
 Using the newest versions of all, SmarterMail, clamav, and 
 Declude Virus/Junkmail.
 
 _
 Ken Weise
 Econocaribe Consolidators, Inc.
 2401 NW 69th ST * Miami, FL 33147
 (p) 305.693.5133  *  (f) 305.894.3666
 
 ---
 [This E-mail scanned for viruses by Declude EVA]
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] clam-av as a service

2006-03-07 Thread Harry Vanderzand



I am trying to run 
clamav as a service. I have switch to the clamav port and now have the 
following config in my virus.cfg:

SCANFILE2 
c:\clamav~1\bin\clamscan.exe --quiet --log-verbose --no-summary --max-ratio 0 -l 
report.txtVIRUSCODE2 1

I also started clamd 
as per documentation

However I see the 
clamd process running and also multiple instances of clamscan.exe. Up to 
50 or more of them.

Is that 
normal?

I also see that 
virus scanner2 is not finishing after 60 seconds in some instances, see 
below

Did I miss 
something?

I am running al this 
on dual xeon 3.4 with 2GB ram, imail 8.22, declude 4.09, sniffer and 
invurbl

Should I adjust any 
settings?

Thank 
you

03/07/2006 
12:11:43.774 qbe91081414fe.smd ERROR: Virus scanner 2 didn't finish after 60 
seconds; terminating.03/07/2006 12:11:43.805 qbe91081414fe.smd Virus 
scanner 2 reports exit code of 003/07/2006 12:11:44.945 
qbe91081414fe.smd Scanned: Virus Free [MIME: 1 3864]03/07/2006 
12:11:48.336 qbecf08e61570.smd Vulnerability flags = 86203/07/2006 
12:11:48.414 qbecf08e61570.smd MIME file: [text/html][quoted-printable; 
Length=619 Checksum=47952]03/07/2006 12:11:48.758 qbecf08e61570.smd 
Virus scanner 1 reports exit code of 003/07/2006 12:11:49.570 
qbed308ff1575.smd Vulnerability flags = 86203/07/2006 12:11:50.305 
qbebe08de154c.smd Vulnerability flags = 86203/07/2006 12:11:50.539 
qbed308ff1575.smd Virus scanner 1 reports exit code of 003/07/2006 
12:11:50.758 qbebe08de154c.smd MIME file: [text/html][quoted-printable; 
Length=2124 Checksum=177522]03/07/2006 12:11:51.024 qbebe08de154c.smd 
MIME file: abandonment.gif [base64; Length=43248 Checksum=5360168]03/07/2006 
12:11:51.445 qbebe08de154c.smd Virus scanner 1 reports exit code of 
003/07/2006 12:11:51.492 qbe9908a4150a.smd ERROR: Virus scanner 2 didn't 
finish after 60 seconds; terminating.03/07/2006 12:11:51.492 
qbe9908a4150a.smd Virus scanner 2 reports exit code of 003/07/2006 
12:11:52.008 qbed508ec1578.smd Vulnerability flags = 86203/07/2006 
12:11:52.305 qbed508ec1578.smd MIME file: [text/html][quoted-printable; 
Length=1045 Checksum=72663]03/07/2006 12:11:52.664 qbe9908a4150a.smd 
Scanned: Virus Free [MIME: 10 77594]03/07/2006 12:11:52.695 
qbed508ec1578.smd Virus scanner 1 reports exit code of 003/07/2006 
12:11:52.789 qbebe08bb154b.smd Virus scanner 2 reports exit code of 
003/07/2006 12:11:52.883 qbebe08bb154b.smd Scanned: Virus Free [MIME: 1 
363]

Thank 
you

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222



RE: [Declude.Virus] clamwin second scanner error

2006-03-04 Thread Harry Vanderzand



thank you George.

I appreciate the help

It is running well now

Harry Vanderzand inTown Internet  Computer Services 519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of george 
  kulmanSent: Saturday, March 04, 2006 7:04 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
  second scanner error
  
  
  Craig,
  
  You seem to be using 
  the command lines for Clamav and not ClamWn in your virus.cfg. The 
  following id for a default installation of ClamWin. Also, be sure that 
  you have a C:\Temp directory set up.
  
  SCANFILE 
  C:\Progra~1\clamwin\bin\clamscan.exe --verbose 
  --database="C:\Docume~1\Alluse~1\.clamwin\db" --tempdir="c:\Temp" --no-summary 
  -l report.txt
  VIRUSCODE 
  1
  REPORT 
  FOUND
  
  George
  
  
  
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Craig 
  EdmondsSent: Saturday, March 
  04, 2006 5:05 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
  second scanner errorImportance: 
  High
  
  Hi,
  
  I get a similar error 
  and my virus.cfg file contains this entry
  
  SCANFILE 
  C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
  --max-ratio 0 -l report.txtVIRUSCODE 1 
  
  (I only use clam so 
  VIRUSCODE will be 1)
  
  I geta similar 
  error.
  
  this is an example 
  ofone log entry .
  
  03/04/2006 
  10:55:18.528 q640402a300d0f29e.smd Vulnerability flags = 003/04/2006 
  10:55:18.538 q640402a300d0f29e.smd MIME file: [text/html][quoted-printable; 
  Length=867 Checksum=69427]03/04/2006 10:55:18.769 q640402a300d0f29e.smd 
  Virus scanner 1 reports exit code of 5003/04/2006 10:55:20.932 
  q640402a300d0f29e.smd Virus scanner 1 reports exit code of 5003/04/2006 
  10:55:23.586 q640402a300d0f29e.smd Virus scanner 1 reports exit code of 
  5003/04/2006 10:55:25.799 q640402a300d0f29e.smd Virus scanner 1 reports 
  exit code of 5003/04/2006 10:55:28.433 q640402a300d0f29e.smd Virus scanner 
  1 reports exit code of 50
  
  but here is 
  another...(note is says "contains a virus")
  03/04/2006 
  10:55:39.268 q64142ab20086f2a4.smd Vulnerability flags = 003/04/2006 
  10:55:39.278 q64142ab20086f2a4.smd Outlook 'CR' vulnerability [Subject: Y] in 
  line 603/04/2006 10:55:39.368 q64142ab20086f2a4.smd Virus scanner 1 
  reports exit code of 50
  03/04/2006 
  10:55:41.451 q64142ab20086f2a4.smd Virus scanner 1 reports exit code of 
  5003/04/2006 10:55:44.015 q64142ab20086f2a4.smd Virus scanner 1 reports 
  exit code of 50
  03/04/2006 
  10:55:46.108 q64142ab20086f2a4.smd Virus scanner 1 reports exit code of 
  50
  03/04/2006 
  10:55:48.181 q64142ab20086f2a4.smd Virus scanner 1 reports exit code of 
  50
  03/04/2006 
  10:55:50.184 q64142ab20086f2a4.smd File(s) are INFECTED [[Outlook 'CR' 
  Vulnerability]: 50]
  03/04/2006 
  10:56:11.334 q64142ab20086f2a4.smd Scanned: CONTAINS A VIRUS 03/04/2006 
  10:56:11.334 q64142ab20086f2a4.smd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming 
  from 213.199.252.61]03/04/2006 10:56:11.334 q64142ab20086f2a4.smd Subject: 
  Your sex popularity is in your hands and in the hands of Ultra Allure 
  Pheromones.
  
  Based on these two 
  different files and log entrie, is CLAM working correctly or 
  not?
  
  (Windows 2003, 
  Declude 3.05, CLam AV - up to date latest 
  version.)
  
  
  Kindest RegardsCraig 
  Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]Marbella Guide Web 
  PortalW: www.marbellaguide.comE: [EMAIL PROTECTED]
  
  
  
  DISCLAIMER - This message may 
  contain confidential, proprietary or legally privileged information and is 
  intended only for the use of the addressee named above. If you are not the 
  intended recipient of this message you are hereby informed that you must not 
  use, disseminate, copy it in any form or take any action in reliance on it. If 
  you have received this message in error please delete it and any copies of it 
  and notify it to the sender.
  AVISO 
  LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o 
  legalmente protegida y esta dirigida unicamente para el uso de la persona 
  destinataria. Si usted no es la persona destinataria de este mensaje, por la 
  presente se le comunica que no debe usar, difundir, copiar de ninguna forma, 
  ni emprender ninguna accion en relacion con 
  ella.=
  
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Harry 
  VanderzandSent: Saturday, 
  March 04, 2006 5:07 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
  second scanner error
  thank you 
  George
  
  I made the change but 
  now get a different error:
  
  03/03/2006 
  23:04:41.708 q11c601a3eb87.smd Error 50 in virus scanner 2.03/03/2006 
  23:04:41.708 q11c601a3eb87.smd Scanned: Error in virus 
  scanner.
  
  Do you know what that 
  is a

[Declude.Virus] clamwin second scanner error

2006-03-03 Thread Harry Vanderzand



I added clamav as a 
second scanner to my virus.cfg file as follows:

SCANFILE 
C:\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE=5 -DUMB -NOBOOT 
-REPORT=report.txtVIRUSCODE 3VIRUSCODE 6VIRUSCODE 
8REPORT Infection:

SCANFILE 
C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
--max-ratio 0 -l report.txtVIRUSCODE 1 




Now I get the 
folowing error in the virus log:
03/03/2006 
17:11:59.307 qbf26019990d6.smd Vulnerability flags = 86203/03/2006 
17:12:09.448 qbf26019990d6.smd Could not find parse string Infection: in 
report.txt03/03/2006 17:12:09.448 qbf26019990d6.smd Error 50 in virus 
scanner 1.03/03/2006 17:12:09.448 qbf26019990d6.smd Your virus scanner 
DOES NOT EXIST (at D:\IMail\spool\proc\work\DBF260~1.VIR\); NOT SCANNING 
ATTACHMENTS! [2] Error String: [The system cannot find the file 
specified.]03/03/2006 17:12:09.448 qbf26019990d6.smd Scanned: Error 
starting scanner

Any idea what I did 
wrong?

thank 
you
Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222



RE: [Declude.Virus] clamwin second scanner error

2006-03-03 Thread Harry Vanderzand



thank you George

I made the change but now get a different 
error:

03/03/2006 23:04:41.708 q11c601a3eb87.smd Error 50 in 
virus scanner 2.03/03/2006 23:04:41.708 q11c601a3eb87.smd Scanned: Error 
in virus scanner.

Do you know what that is about?

Harry Vanderzand inTown Internet  Computer Services 519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of george 
  kulmanSent: Friday, March 03, 2006 6:15 PMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
  second scanner error
  
  
  Harry,
  
  For the second scanner you need to have a 2 after 
  SCANFILE and VIRUSCODE
  
  SCANFILE2 
  C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
  --max-ratio 0 -l report.txtVIRUSCODE2 1 

  
  George
  
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Harry 
  VanderzandSent: Friday, 
  March 03, 2006 5:16 PMTo: 
  Declude.Virus@declude.comSubject: [Declude.Virus] clamwin second 
  scanner error
  
  
  I added clamav as a second scanner 
  to my virus.cfg file as follows:
  
  
  
  SCANFILE C:\F-Prot\fpcmd.exe 
  -TYPE -SILENT -NOMEM -ARCHIVE=5 -DUMB -NOBOOT -REPORT=report.txtVIRUSCODE 
  3VIRUSCODE 6VIRUSCODE 8REPORT 
  Infection:
  
  
  
  SCANFILE 
  C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
  --max-ratio 0 -l report.txtVIRUSCODE 1 
  
  
  
  
  
  
  
  
  
  
  Now I get the folowing error in 
  the virus log:
  
  03/03/2006 17:11:59.307 
  qbf26019990d6.smd Vulnerability flags = 86203/03/2006 17:12:09.448 
  qbf26019990d6.smd Could not find parse string Infection: in 
  report.txt03/03/2006 17:12:09.448 qbf26019990d6.smd Error 50 in virus 
  scanner 1.03/03/2006 17:12:09.448 qbf26019990d6.smd Your virus scanner 
  DOES NOT EXIST (at D:\IMail\spool\proc\work\DBF260~1.VIR\); NOT SCANNING 
  ATTACHMENTS! [2] Error String: [The system cannot find the file 
  specified.]03/03/2006 17:12:09.448 qbf26019990d6.smd Scanned: Error 
  starting scanner
  
  
  
  Any idea what I did 
  wrong?
  
  
  
  thank 
  you
  Harry Vanderzand 
  inTown Internet  Computer 
  Services 11 Belmont Ave. W., Kitchener, 
  ON,N2M 1L2519-741-1222
  
  


RE: [Declude.Virus] clamwin second scanner error

2006-03-03 Thread Harry Vanderzand



thanks again, I think I figured it 
out.

A reboot of the server solved it

Harry Vanderzand inTown Internet  Computer Services 519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Harry 
  VanderzandSent: Friday, March 03, 2006 11:07 PMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
  second scanner error
  
  thank you George
  
  I made the change but now get a different 
  error:
  
  03/03/2006 23:04:41.708 q11c601a3eb87.smd Error 50 in 
  virus scanner 2.03/03/2006 23:04:41.708 q11c601a3eb87.smd Scanned: 
  Error in virus scanner.
  
  Do you know what that is about?
  
  Harry Vanderzand inTown Internet  Computer Services 519-741-1222
  
  


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of george 
kulmanSent: Friday, March 03, 2006 6:15 PMTo: 
Declude.Virus@declude.comSubject: RE: [Declude.Virus] clamwin 
second scanner error


Harry,

For the second scanner you need to have a 2 after 
SCANFILE and VIRUSCODE

SCANFILE2 
C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
--max-ratio 0 -l report.txtVIRUSCODE2 1 


George






From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of Harry 
VanderzandSent: Friday, 
March 03, 2006 5:16 PMTo: 
Declude.Virus@declude.comSubject: [Declude.Virus] clamwin second 
scanner error


I added clamav as a second 
scanner to my virus.cfg file as follows:



SCANFILE 
C:\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE=5 -DUMB -NOBOOT 
-REPORT=report.txtVIRUSCODE 3VIRUSCODE 6VIRUSCODE 
8REPORT Infection:



SCANFILE 
C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary 
--max-ratio 0 -l report.txtVIRUSCODE 1 










Now I get the folowing error in 
the virus log:

03/03/2006 17:11:59.307 
qbf26019990d6.smd Vulnerability flags = 86203/03/2006 17:12:09.448 
qbf26019990d6.smd Could not find parse string Infection: in 
report.txt03/03/2006 17:12:09.448 qbf26019990d6.smd Error 50 in 
virus scanner 1.03/03/2006 17:12:09.448 qbf26019990d6.smd Your virus 
scanner DOES NOT EXIST (at D:\IMail\spool\proc\work\DBF260~1.VIR\); 
NOT SCANNING ATTACHMENTS! [2] Error String: [The system cannot find the file 
specified.]03/03/2006 17:12:09.448 qbf26019990d6.smd Scanned: Error 
starting scanner



Any idea what I did 
wrong?



thank 
you
Harry Vanderzand 
inTown Internet  Computer 
Services 11 Belmont Ave. W., Kitchener, 
ON,N2M 1L2519-741-1222




RE: [Declude.Virus] Declude 3.0.5.14 Posted

2005-10-31 Thread Harry Vanderzand
Installed it and now the behaviour we had of the processing at 3.05.9 is
back

Thank you

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
 Sent: Monday, October 31, 2005 1:09 PM
 To: Declude.JunkMail@declude.com; Declude.Virus@declude.com; 
 [EMAIL PROTECTED]
 Subject: [Declude.Virus] Declude 3.0.5.14 Posted
 
 Declude 3.0.5.14
 
 ADDED - WINSOCKCLEANUPON
 Located in Declude.cfg. Some customers had issues related to 
 their network stack causing loss of functionality for basic 
 network operations. The default for this directive is OFF
 
 FIX - Memory leaked fixed by forcing windows to close handles 
 once complete 
   (Note this only effected a handful of customers)
 
 David B
 www.declude.com
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Virus directory

2005-10-04 Thread Harry Vanderzand
Declude puts all e-mails with viruses into a separate directory

I find I always have to go there and delete files.

Is there a way to set the system to just delete those e-mails rather than
move them into a separate directory?

Thank you

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Info Wind
 Sent: Friday, September 30, 2005 8:29 AM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Version 3.0.5.5
 
 same to me, there seams to be problems when not uninstalling. 
 I had the same issue.
 Thanks John for the proper procedure, that helped me.
 
 Bye,
 Uwe
 
 - Original Message -
 From: Harry Vanderzand
 To: Declude.Virus@declude.com
 Sent: Friday, September 30, 2005 1:50 PM
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 
 
 that is what I thought, but I had to go into add remove 
 programs and remove 
 the service before I could use the install procedure.  If I had the 
 decludeproc.exe file then I could likely have copied the new file
 
 Harry Vanderzand
 inTown Internet  Computer Services
 11 Belmont Ave. W., Kitchener, ON,N2M 1L2
 519-741-1222
 
 
 
 
 
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
 Sent: Thursday, September 29, 2005 6:09 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 
 
 The proper procedure is:
 Stop Imail SMTP
 Stop Imail Queue Manager
 Make sure spool\proc and spool\proc\work are empty of files. 
 If not, wait 
 until they are processed.
 Stop Decludeproc
 Copy in the new file
 Start Decludeproc
 Start Imail SMTP
 Start Imail Queue Manager
 
 John T
 eServices For You
 
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
 Sent: Thursday, September 29, 2005 2:07 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 
 You need to stop SMTP and queuemanager. It probably got 
 started back up. By 
 the stub program.
 
 Kevin Bilbee
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] Behalf Of Harry Vanderzand
 Sent: Thursday, September 29, 2005 1:59 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 I downloaded this update
 
 stopped decludeproc
 
 ran the update
 
 got message:  Another version is already running, cannot update
 
 what's up with that?
 
 Harry Vanderzand
 inTown Internet  Computer Services
 11 Belmont Ave. W., Kitchener, ON,N2M 1L2
 519-741-1222
 
 
 
 
 
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill Billman
 Sent: Thursday, September 29, 2005 2:53 PM
 To: Declude.Virus@declude.com; Declude.JunkMail@declude.com
 Subject: [Declude.Virus] Version 3.0.5.5
 Declude Version 3.0.5.5 is available on the website for download.
 There are two changes from version 3.0.5.3
 
 Fix for special character scanning causing abnormal 
 termination.  Special 
 thanks to John Tolmachoff for identifying and helping us fix 
 this nasty.
 For SmarterMail only.  Correctly handle parsing the XML file 
 for the email 
 installation path.
 
 SY, Bill Billman
 Declude
 
 
 --
 No virus found in this outgoing message.
 Checked by AVG Anti-Virus.
 Version: 7.0.344 / Virus Database: 267.11.7/112 - Release 
 Date: 9/26/2005 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Version 3.0.5.5

2005-09-30 Thread Harry Vanderzand



that is what I thought, but I had to go into add remove 
programs and remove the service before I could use the install procedure. 
If I had the decludeproc.exe file then I could likely have "copied the new 
file"

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of John T 
  (Lists)Sent: Thursday, September 29, 2005 6:09 PMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] Version 
  3.0.5.5
  
  
  The proper 
  procedure is:
  Stop Imail 
  SMTP
  Stop Imail Queue 
  Manager
  Make sure 
  spool\proc and spool\proc\work are empty of files. If not, wait until they are 
  processed.
  Stop 
  Decludeproc
  Copy in the new 
  file
  Start 
  Decludeproc
  Start Imail 
  SMTP
  Start Imail Queue 
  Manager
  
  
  John 
  T
  eServices For 
  You
  
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Kevin 
  BilbeeSent: 
  Thursday, September 29, 
  2005 2:07 
  PMTo: Declude.Virus@declude.comSubject: RE: [Declude.Virus] Version 
  3.0.5.5
  
  
  You need to stop SMTP 
  and queuemanager. It probably got started back up. By the stub 
  program.
  
  
  
  Kevin 
  Bilbee
  
-Original 
Message-From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]On Behalf Of Harry 
VanderzandSent: 
Thursday, September 29, 
2005 1:59 
PMTo: 
Declude.Virus@declude.comSubject: RE: [Declude.Virus] Version 
3.0.5.5
I downloaded this 
update

stopped 
decludeproc

ran the 
update

got message: 
Another version is already running, cannot update

what's up with 
that?


Harry Vanderzand 
inTown Internet  Computer 
Services 11 Belmont Ave. W., Kitchener, 
ON,N2M 1L2519-741-1222



  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Bill 
  BillmanSent: 
  Thursday, September 29, 
  2005 2:53 
  PMTo: Declude.Virus@declude.com; 
  Declude.JunkMail@declude.comSubject: [Declude.Virus] Version 
  3.0.5.5
  Declude Version 3.0.5.5 is 
  available on the website for download.
  There are two changes from 
  version 3.0.5.3
  
  
Fix for special character 
scanning causing abnormal termination. Special thanks to John 
Tolmachoff for identifying and helping us fix this nasty. 
For SmarterMail only. 
Correctly handle parsing the XML file for the email installation 
path. 
  
  SY, Bill 
  Billman
  Declude
  
  
  --No virus found in this outgoing 
  message.Checked by AVG Anti-Virus.Version: 7.0.344 / Virus 
  Database: 267.11.7/112 - Release Date: 9/26/2005


RE: [Declude.Virus] Version 3.0.5.5

2005-09-30 Thread Harry Vanderzand
Hi David

One almost needs to know less using this method than having to go  and
uninstall the service and then reinstall it

Will you make this file available in this manner in the future or will the
install procedure be updated to help simplify things.

I strive to have the greatest simplicity in operating my servers.  It means
I am spending less time with them and more with my customers.

Thank you

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
 Sent: Friday, September 30, 2005 11:11 AM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 
 Undocumented but here it is for those on the board who know 
 what they are doing.
 
 IMAIL  
 http://www.declude.com/Version/3055/IM/decludeproc3055.exe
 SMARTERMAIL
 http://www.declude.com/Version/3055/SM/decludeproc3055.exe
 
 David Barker
 www.declude.com
 
  
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
 Sent: Thursday, September 29, 2005 5:35 PM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Version 3.0.5.5
 
 Thanks
 
 That's seems like a lot to do for such a simple process.
 
 Is it not just the decludeproc.exe that needs to be replaced? 
  If so then stopping the service, replace the file with the 
 new one and then starting it, would be quicker to do.
 
 Is there anywhere we can get just the new decludeproc.exe?
 
 Harry Vanderzand
 inTown Internet  Computer Services
 11 Belmont Ave. W., Kitchener, ON,N2M 1L2
 519-741-1222
 
  
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
  ([EMAIL PROTECTED])
  Sent: Thursday, September 29, 2005 5:15 PM
  To: Declude.Virus@declude.com
  Subject: Re: [Declude.Virus] Version 3.0.5.5
  
  Harry,
  
  The message on my system just said you need to remove the last 
  version.
  Once I did that and re-ran the update all was well. 
  
  Darrell
  
   
  --
  --
  Check out http://www.invariantsystems.com for utilities for Declude 
  And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
  integration, MRTG Integration, and Log Parsers.
  
  
  Harry Vanderzand writes: 
  
   I downloaded this update

   stopped decludeproc

   ran the update

   got message:  Another version is already running, cannot update

   what's up with that?
 
   
   Harry Vanderzand
   inTown Internet  Computer Services
   11 Belmont Ave. W., Kitchener, ON,N2M 1L2
   519-741-1222
   
 
   
   
 _   
   
   From: [EMAIL PROTECTED] 
   [mailto:[EMAIL PROTECTED] On Behalf Of Bill Billman
   Sent: Thursday, September 29, 2005 2:53 PM
   To: Declude.Virus@declude.com; Declude.JunkMail@declude.com
   Subject: [Declude.Virus] Version 3.0.5.5
   

   
   Declude Version 3.0.5.5 is available on the website for download. 
   
   There are two changes from version 3.0.5.3
   
 
   
   1.Fix for special character scanning causing 
 abnormal termination.
   Special thanks to John Tolmachoff for identifying and
  helping us fix
   this nasty.
   
   2.For SmarterMail only.  Correctly handle parsing the XML 
  file for the
   email installation path.  
   
 
   
   SY, Bill Billman
   
   Declude
   
 
   
   
   --
   No virus found in this outgoing message.
   Checked by AVG Anti-Virus.
   Version: 7.0.344 / Virus Database: 267.11.7/112 - Release Date: 
   9/26/2005
   
   
   
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, 
  just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Version 3.0.5.5

2005-09-29 Thread Harry Vanderzand



I downloaded this update

stopped decludeproc

ran the update

got message: Another version is already running, 
cannot update

what's up with that?

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Bill 
  BillmanSent: Thursday, September 29, 2005 2:53 PMTo: 
  Declude.Virus@declude.com; Declude.JunkMail@declude.comSubject: 
  [Declude.Virus] Version 3.0.5.5
  
  
  Declude Version 3.0.5.5 is 
  available on the website for download.
  There are two changes from version 
  3.0.5.3
  
  
Fix for special 
character scanning causing abnormal termination. Special thanks to 
John Tolmachoff for identifying and helping us fix this 
nasty. 
For SmarterMail 
only. Correctly handle parsing the XML file for the email installation 
path. 
  
  SY, Bill 
  Billman
  Declude
  
  --No virus found in this outgoing message.Checked by 
  AVG Anti-Virus.Version: 7.0.344 / Virus Database: 267.11.7/112 - Release 
  Date: 9/26/2005


RE: [Declude.Virus] Version 3.0.5.5

2005-09-29 Thread Harry Vanderzand



Tried that and it did not work

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Kevin 
  BilbeeSent: Thursday, September 29, 2005 5:07 PMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] Version 
  3.0.5.5
  
  You 
  need to stop SMTP and queuemanager. It probably got started back up. By the 
  stub program.
  
  Kevin Bilbee
  
-Original Message-From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]On Behalf Of Harry 
VanderzandSent: Thursday, September 29, 2005 1:59 
PMTo: Declude.Virus@declude.comSubject: RE: 
[Declude.Virus] Version 3.0.5.5
I downloaded this update

stopped decludeproc

ran the update

got message: Another version is already running, 
cannot update

what's up with that?

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Bill 
  BillmanSent: Thursday, September 29, 2005 2:53 PMTo: 
  Declude.Virus@declude.com; Declude.JunkMail@declude.comSubject: 
  [Declude.Virus] Version 3.0.5.5
  
  
  Declude Version 3.0.5.5 is 
  available on the website for download.
  There are two changes from 
  version 3.0.5.3
  
  
Fix for special 
character scanning causing abnormal termination. Special thanks to 
John Tolmachoff for identifying and helping us fix this 
nasty. 
For SmarterMail 
only. Correctly handle parsing the XML file for the email 
installation path. 
  
  SY, Bill 
  Billman
  Declude
  
  --No virus found in this outgoing message.Checked 
  by AVG Anti-Virus.Version: 7.0.344 / Virus Database: 267.11.7/112 - 
  Release Date: 
9/26/2005


RE: [Declude.Virus] Version 3.0.5.5

2005-09-29 Thread Harry Vanderzand
Thanks

That's seems like a lot to do for such a simple process.

Is it not just the decludeproc.exe that needs to be replaced?  If so then
stopping the service, replace the file with the new one and then starting
it, would be quicker to do.

Is there anywhere we can get just the new decludeproc.exe?

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
 ([EMAIL PROTECTED])
 Sent: Thursday, September 29, 2005 5:15 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Version 3.0.5.5
 
 Harry, 
 
 The message on my system just said you need to remove the 
 last version.  
 Once I did that and re-ran the update all was well. 
 
 Darrell 
 
  
 --
 --
 Check out http://www.invariantsystems.com for utilities for 
 Declude And Imail.  IMail/Declude Overflow Queue Monitoring, 
 SURBL/URI integration, MRTG Integration, and Log Parsers. 
 
 
 Harry Vanderzand writes: 
 
  I downloaded this update
   
  stopped decludeproc
   
  ran the update
   
  got message:  Another version is already running, cannot update
   
  what's up with that?

  
  Harry Vanderzand
  inTown Internet  Computer Services
  11 Belmont Ave. W., Kitchener, ON,N2M 1L2
  519-741-1222
  

  
  
_   
  
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Bill Billman
  Sent: Thursday, September 29, 2005 2:53 PM
  To: Declude.Virus@declude.com; Declude.JunkMail@declude.com
  Subject: [Declude.Virus] Version 3.0.5.5
  
   
  
  Declude Version 3.0.5.5 is available on the website for download. 
  
  There are two changes from version 3.0.5.3
  

  
  1.  Fix for special character scanning causing abnormal termination.
  Special thanks to John Tolmachoff for identifying and 
 helping us fix 
  this nasty.
  
  2.  For SmarterMail only.  Correctly handle parsing the XML 
 file for the
  email installation path.  
  

  
  SY, Bill Billman
  
  Declude
  

  
  
  --
  No virus found in this outgoing message.
  Checked by AVG Anti-Virus.
  Version: 7.0.344 / Virus Database: 267.11.7/112 - Release Date: 
  9/26/2005
  
  
  
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Viruses being quarantined when DELETEVIRUSES=ON

2004-10-27 Thread Harry Vanderzand

It seems to me I should not be collecting viruses in the spool/virus
directory when I have DELETEVIRUSES ON.

Yet I am collecting them there.

Any way to stop this?

Thank you

Harry Vanderzand
Intown Internet


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Virus notifications

2004-06-15 Thread Harry Vanderzand
Ditto!

I only send to myself so I have a sense of what is going on from a quick
overview

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2
519-741-1222
Did you know we offer: 
- Province wide dial-up and high speed internet access 
- Web accessible email with anti-spam\antivirus protection
- Computer hardware sales and service
- Experienced website developers 



 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Russ 
 Uhte (Lists)
 Sent: Tuesday, June 15, 2004 3:05 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.Virus] Virus notifications
 
 
 At 01:23 PM 6/15/2004, David Fletcher wrote:
 Hi all,
 
 I know I should have stayed on top of this all along, but we need to 
 make some adjustments now.
 
 What is the current recommendation as far as virus 
 notification setting 
 goes?  We need to make sure we aren't doing more harm than 
 good in this 
 arena.  I know Matt had said he had some suggestions for us 
 once when 
 we where corresponding privately on another matter.
 
 I'm to the point now where I'm only sending virus 
 notifications to myself, 
 and only so I can see trends.  It's pretty much useless to 
 send any other 
 type of virus notifications.  Just my perspective!!
 
 -Russ 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] How turn off Virus notification

2004-03-31 Thread Harry Vanderzand
Title: Message



How do 
I turn off virus notification totally.

I am 
getting too many complaints regarding the volume these days and would just like 
to turn all notifications off

thanks

Harry 
Vanderzand


RE: [Declude.Virus] MyDoom Virus got through!

2004-01-29 Thread Harry Vanderzand
Since this is the only one I have seen as all else has been caught, I do not
know the real virus size

The size of what came in here is 14K.

One more question, everyone is talking about version 1.77ixx  whereas when I
do the diag I get the results below

How do I find the exact version I have.  I downloaded last a few days ago

D:\IMaildeclude -diag
Declude 1.77 (C) Copyright 2000-2003 Computerized Horizons.


Diagnostics ON (Declude v1.77).

Declude JunkMail:  Config file found (D:\IMail\Declude\global.CFG).
Declude Virus: Config file found (D:\IMail\Declude\Virus.CFG).
Declude Hijack:Not installed (no D:\IMail\Declude\Hijack.CFG file).
Declude Confirm:   Not installed (no D:\IMail\Declude\Confirm.CFG file).

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2



 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Thursday, January 29, 2004 2:57 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] MyDoom Virus got through!
 
 
 
 So although Norton caught this on my desktop you figure it 
 really was 
 not the virus?
 
 Exactly.
 
 If you check the size of the file, you'll see that it is 
 smaller than a 
 real copy.  One person who reported this happening found the one that 
 Norton caught was about 1K (smaller than any known PC virus).
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail 
 mailservers. Declude Virus: Catches known viruses and is the 
 leader in mailserver 
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day 
 evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Received information is not correct

2003-03-12 Thread Harry Vanderzand
In the virus report coming to my postmaster account I usually set the mail
server it came from and the IP address.

In some cases right now I am getting my own mail server URL listed with a
foreign IP address.

Any idea what is happening here

EG: Received: from mail.intown.net [65.29.100.113] by intown.net

When mail.intown.net is 216.16.233.12

thanks


Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Received information is not correct

2003-03-12 Thread Harry Vanderzand
Sorry I had a type there which makes the request sound wrong

I meant I usually SEE  not SET

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2



 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
 Sent: Wednesday, March 12, 2003 3:00 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] Received information is not correct
 
 
 In the virus report coming to my postmaster account I usually 
 set the mail server it came from and the IP address.
 
 In some cases right now I am getting my own mail server URL 
 listed with a foreign IP address.
 
 Any idea what is happening here
 
 EG: Received: from mail.intown.net [65.29.100.113] by intown.net
 
 When mail.intown.net is 216.16.233.12
 
 thanks
 
 
 Harry Vanderzand 
 inTown Internet  Computer Services 
 11 Belmont Ave. W.
 Kitchener, ON
 N2M 1L2
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Virus notification to IT department

2003-03-05 Thread Harry Vanderzand
A client of ours is asking if it is possible to send a notification to
[EMAIL PROTECTED] as well as a notification to the user.

Is it possible to do this for just one domain while leaving the others as
is?

Thank you

Harry Vanderzand 
inTown Internet  Computer Services 
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] klez

2002-05-16 Thread Harry Vanderzand

It is insane!

And the spoofing is a pain in the butt also.

The volume of them is just incredible.

Harry Vanderzand

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Bird
Sent: Thursday, May 16, 2002 12:37 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] klez


Is anyone else being drove to insanity by klez?
We are catching the virus, but that doesn't stop everyone else on different
Isp's thinking we are sending them because of the spoofed from address.
blblblbl

Ken Bird

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] klez

2002-05-16 Thread Harry Vanderzand

A further point on this.

We have had incidents of our postmaster account being the spoofed address that is used.

Does anyone have any ideas how Klez is doing this?

Harry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Bird
Sent: Thursday, May 16, 2002 12:37 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] klez


Is anyone else being drove to insanity by klez?
We are catching the virus, but that doesn't stop everyone else on different
Isp's thinking we are sending them because of the spoofed from address.
blblblbl

Ken Bird

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: KITHRUP:RE: [Declude.Virus] klez

2002-05-16 Thread Harry Vanderzand

I just searched the manual for SKIPIFVIRUSNAMEHAS and could not find anything on it.

Can anyone give me the method one uses it?  

Looks like it would be worthwhile

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bill Naber
Sent: Thursday, May 16, 2002 12:57 PM
To: [EMAIL PROTECTED]
Subject: KITHRUP:RE: [Declude.Virus] klez


The worst part was about two weeks ago when the first big slug of infected
outgoing messages hit.  I was scrambling trying to disinfect the sender's
computers before realizing the FROM: address was being faked.

Since then we implemented the SKIPIFVIRUSNAMEHAS feature on the
notifications we normally send to the sender and intended recipients of an
infected message.

We also changed relay from using the sender's name to IP address (all our
senders are at fixed locations).

The Email admins set up Outlook rules to route the KLEZ notifications to a
special folder and just keep an eye out for any outgoing (none so far,
thanks to Declude).

The steps above cut out the main two problems we were having of:

1) Mail server having to process a bunch of infected mail as far as the
virus trap
2) Calls from concerned users about floods of someone tried to send you a
virus or you tried to send a virus messages.

Good luck,
-Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Bird
Sent: Thursday, May 16, 2002 12:37 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] klez


Is anyone else being drove to insanity by klez?
We are catching the virus, but that doesn't stop everyone else on different
Isp's thinking we are sending them because of the spoofed from address.
blblblbl

Ken Bird

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .