: Thursday, June 05, 2008 1:45 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] ClamAV
Hi,
Been using the old F-prot v3 as a second scanner but I disabled it today. As
the new F-prot 6 scanner is not allowed with Declude, well sort of but I
don't want to pay that mucht ;-) I
toerisme
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] / www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http
Can anyone provide a SCANFILE line that they know works with F-PROT 6 ?
Thanks
David B
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail
You've got to buy the server product now. I don't think the cheap
version works anymore with Declude.
--SJ
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Barker
Sent: Tuesday, June 03, 2008 11:47 AM
To: declude.virus@declude.com
Subject
62
VIRUSCODE 63
for completeness.
Hope this helps,
Darin.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 03, 2008 11:46 AM
Subject: [Declude.Virus] F-PROT 6
Can anyone provide a SCANFILE line that they know works with F
PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 03, 2008 1:09 PM
Subject: RE: [Declude.Virus] F-PROT 6
You've got to buy the server product now. I don't think the cheap
version works anymore with Declude.
--SJ
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL
is phenomenal.
--SJ
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darin Cox
Sent: Tuesday, June 03, 2008 2:39 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] F-PROT 6
Yes. It's expensive, but is still a good and efficient scanner
Excellent response thanks Darin.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Tuesday, June 03, 2008 2:39 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] F-PROT 6
Yes. It's expensive, but is still a good and efficient
If there's a command line scanner, it shouldn't be too difficult, but I
don't know offhand if Trend Micro has one.
Darin.
- Original Message -
From: SJ Stanaitis [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 03, 2008 3:24 PM
Subject: RE: [Declude.Virus] F-PROT 6
this week.
Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer
tio hogeschool hospitality en toerisme
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] / www.tio.nl
- Original Message -
From: David Barker
To: declude.virus@declude.com
, Commtouch's
Zero-Hour provides proactive virus blocking that is effective and
signature-independent. http://www.commtouch.com/GUI/images/general/blank.gif
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma
Sent: Wednesday, May 07, 2008 2:42 AM
To: declude.virus@declude.com
. Mai 2008 16:20
An: declude.virus@declude.com
Betreff: RE: [Declude.Virus] ZEROHOUR caught a virus
Zerohour does not catch viruses based on signatures. It is a virus signature
that defines it's name. Signature-less protection is an essential complement to
traditional AV technologies
] / www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Here too.
in
message.scr
Unknown File
[.SCR file]
...
Alex
Von: [EMAIL PROTECTED] [EMAIL PROTECTED] im Auftrag von Bonno Bloksma [EMAIL
PROTECTED]
Gesendet: Montag, 5. Mai 2008 08:27
An: Declude.Virus@declude.com
Betreff: [Declude.Virus] ZEROHOUR caught a virus
: Sunday, May 04, 2008 11:27 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] ZEROHOUR caught a virus
Hi,
Suddenly ZEROHOUR starts catching virusses but it does not know WHAT it caught.
--quote---
Declude Virus v4.3.64 caught the ZEROHOUR Unknown
Sent: Monday, May 05, 2008 2:52 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] ZEROHOUR caught a virus
If I remember correctly, it is not the ZEROHOUR spam test catching a virus. It
is the internal AVG virus scanner saying it has caught an unknown virus, or
what it thinks
We do not have Zerohour, as we host mails for our customers :-)
Alex
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Barker
Gesendet: Montag, 5. Mai 2008 21:53
An: declude.virus@declude.com
Betreff: RE: [Declude.Virus] ZEROHOUR caught a virus
It could be ZEROHOUR
=1
C:\clamav-devel\bin\clamdscan.exe --quiet --max-ratio 0 --max-space 1M -l
report.txt
VIRUSCODE 1
REPORT FOUND
I am hoping that someone on the list might have some suggestions.
Thanks in advance.
Brian Thompson
---
This E-mail came from the Declude.Virus mailing list
for thirdparty\runclamscan in your ClamDir,
this is the easy way to run ClamD.
Alex
-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von
Brian T
Gesendet: Freitag, 28. März 2008 18:38
An: declude.virus@declude.com
Betreff: [Declude.Virus] ClamAV
Gesendet: Donnerstag, 20. März 2008 19:12
An: declude.virus@declude.com
Betreff: re: [Declude.Virus] bit OT: RunClamD on 64 Bit Windows 2003?
Don't know if this relates to your situation, but hope it helps. I ran
into a problem similar to this, but on a 32-bit machine. It was caused
when
at [EMAIL PROTECTED]
If you are a customer of Eaton and Kirk Advertising and you need assistance,
please contact John Kirkpatrick at [EMAIL PROTECTED] or by phone at
760-775-3626. Thank you.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail
Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955
---
This E-mail came from the Declude.Virus mailing list
at some type of
permissions problem.
Gary
Original Message
From: Hirthe, Alexander [EMAIL PROTECTED]
Sent: Thursday, March 20, 2008 3:42 AM
To: declude.virus@declude.com declude.virus@declude.com
Subject: [Declude.Virus] bit OT: RunClamD on 64 Bit Windows 2003?
Hello,
has
No name, just the extenesion?John T
eServices For You
-Original Message-
From: Andy Schmidt [EMAIL PROTECTED]
Sent 3/3/2008 9:30:59 AM
To: [EMAIL PROTECTED]
Cc: declude.virus@declude.com
Subject: [Declude.Virus] Invalid Zip VulnerabilityHi, I checked your KB – and
it doesn’t document
Of John T
Sent: Thursday, March 06, 2008 10:54 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Invalid Zip Vulnerability
No name, just the extenesion?
John T
eServices For You
-Original Message-
From: Andy Schmidt [EMAIL PROTECTED]
Sent 3/3/2008 9:30:59 AM
To: [EMAIL
came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
[EMAIL PROTECTED] / www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] / www.tio.nl
http://www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives can be found
Will you morons please remove me from your spam list?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, February 04, 2008 10:33 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] re: [1EE-0F3A4F36-9FAD] You do not have permission
to post to the declude.virus@declude.com
hours, if you have
had no response in this time please do not hesitate to call our support number
1-866-332-5833Thank You.
Declude Technical Support
view this ticket online
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
hours, if you have
had no response in this time please do not hesitate to call our support number
1-866-332-5833Thank You.
Declude Technical Support
view this ticket online
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
-Declude: Version 4.3.64; Code 0x0 from
pool-71-162-228-88.phlapa.fios.verizon.net [71.162.228.88]
X-Declude: Triggered [0] Whitelisted
Return-path: [EMAIL PROTECTED]
X-RCPT-TO: [EMAIL PROTECTED]
X-UIDL: 478726316
X-IMail-ThreadID: 5ada01aa99df
---
This E-mail came from the Declude.Virus mailing
from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
hotelmanagement en toerisme
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] / www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives
-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] / www.tio.nl
http://www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives
-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] / www.tio.nl
http://www.tio.nl
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives
/reply messages, etc.)
Best Regards,
Andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, December 10, 2007 10:33 AM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Re: [Declude.Virus
messages, etc.)
Best Regards,
Andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, December 10, 2007 10:33 AM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Re: [Declude.Virus] IMmail
it a configuration
option to use a standard tool, such as BLAT.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, December 10, 2007 2:06 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] RE: IMmail 2006.23 release notes
Some of us believe
:[EMAIL PROTECTED] *On Behalf Of
*Matt
*Sent:* Monday, December 10, 2007 2:06 PM
*To:* declude.virus@declude.com
*Subject:* Re: [Declude.Virus] RE: IMmail 2006.23 release notes
Some of us believe that it is the IMail1.exe executable that Declude
uses and not the IMail.exe executable
Does anyone have a recommendation of an open source piece of software that is
the counterpart of Blat. I am looking for a command line POP3 utility.
Any thoughts?
Don
- Original Message -
From: Matt
To: declude.virus@declude.com
Sent: Monday, December 10, 2007 3:01 PM
-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1914
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
with a single space or tab in the E-mail body, just not the
headers).
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
to have a line with a
single space or tab in the E-mail body, just not the headers).
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com
and that there is
a section in RFC that says clearly that these lines are not allowed.
Thank you.
Ruben Marti.
Mon Mariola, S.L.
- Original Message -
From: Matt
To: declude.virus@declude.com
Sent: Monday, December 03, 2007 4:15 PM
Subject: Re: [Declude.Virus] Outlook 'Blank Folding
To: declude.virus@declude.com
Sent: Monday, December 03, 2007 4:15 PM
Subject: Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability
Ruben,
In your Virus.cfg file, add the following line:
ALLOWVULNERABILITYOLBLANKFOLDING
This will turn off this vulnerability detection. There have been
]
To: declude.virus@declude.com
Sent: Monday, December 03, 2007 11:41 AM
Subject: Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability
Disable it and be done with it. There is no option to partially support
the issue, and the issue is very likely not a threat. Just because
something isn't RFC
Parsers.
Serge wrote:
Hi
how to make VLA work wih declude built in scanner ?
apparantly it only handles viruses caught by second scanner
TIA
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus
Hi
how to make VLA work wih declude built in scanner ?
apparantly it only handles viruses caught by second scanner
TIA
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Don Brown
Sent: Friday, October 26, 2007 1:54 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] bloodhound exploit 163 - Slipping Through
A customer running Norton reports receiving several infected
e-mails today
Nr. DE145782955
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
x7008
Toll Free: 1-866.332.5833 x7008
Fax: 978.334.0700
Email: [EMAIL PROTECTED]
- Original Message -
From: Hirthe, Alexander [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, October 19, 2007 12:08 PM
Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Hello,
our declude
Of Hirthe,
Alexander
Sent: Friday, October 19, 2007 1:09 PM
To: declude.virus@declude.com
Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Hello,
our declude is crashing, no matter if I try 4.3.46 or 4.3.64.
It looks like a special offer with about 1400 To Addresses.
The Header looks not very
My apologies I was lysdexic
Latest Full Release 4.3.46
Latest Interim 4.3.64
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 18, 2007 3:56 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.Virus
]; declude.virus@declude.com
Subject: [Declude.JunkMail] 4.3.46
4.3.64 available, we have made some changes to address the vulnerability if
you would like to test this - it can be downloaded from the interim
location.
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x
The dyslexic atheist says, There is no dog.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Thursday, October 18, 2007 3:07 PM
To: declude.virus@declude.com; [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
My apologies I was lysdexic
Latest Full Release 4.3.46
Latest Interim 4.3.64
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 18, 2007 3:56 PM
To: [EMAIL PROTECTED]; declude.virus@declude.com
Subject: [Declude.Virus
with vulnerability!
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing
Thanks for the response!
Randy A.
- Original Message -
From: Andy Schmidt
To: declude.virus@declude.com
Sent: Thursday, October 11, 2007 5:14 PM
Subject: RE: [Declude.Virus] Partial Vulnerability test failures on legitmate
email
Hi,
Actually, the Partial
can try it again.
Has MS made updates to Outlook to affect this? this has just started on us
about 5 days ago
Randy A.
Global Web Solutions Inc
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus
Regards,
Andy
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Randy
Armbrecht
Sent: Thursday, October 11, 2007 3:45 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] Partial Vulnerability test failures on legitmate
email
Does anyone know which Outlook Vulnerability
Armbrecht
Sent: Thursday, October 11, 2007 3:45 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] Partial Vulnerability test failures
on
legitmate email
Does
anyone know which Outlook Vulnerability test to REM out in the
virus.cfg to
keep the [Partial Vulnerability] test from
the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
I reported this to declude. They are working on it.
Kevin Bilbee
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 04, 2007 6:53 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] 4.3.62 countless false positives
Bilbee
Sent: Friday, October 05, 2007 3:15 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
I reported this to declude. They are working on it.
Kevin Bilbee
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
We are looking into this code, are you sure it is 4.3.62 and not a change
with YahooMailWebService?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 04, 2007 9:53 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] 4.3.62 countless false
If a domain is whitelisted, does Declude bypass the virus filtering and
allow the email to pass through?
Jon Lucas
Poly-Cast, Inc.
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL
came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
No whitelisted is only for JM.
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon
Lucas
Sent: Friday, October 05, 2007 10:46 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] Question regarding Whitelist
If a domain is whitelisted, does
I did not have this problem with .57. So we can rule out .46.
Sorry, jumped right from .57 to .62 - so can't say if it was introduced with
.59 already.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, October 05, 2007 10:49 AM
To: declude.virus
AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
Ok, we are working on the issue, can you replicate it with an earlier
version of Declude like .46 or .59 ?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Ok so if you revert to .57 the issue goes away correct.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Friday, October 05, 2007 11:18 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
I did
integration, MRTG Integration, and Log Parsers.
Jon Lucas wrote:
If a domain is whitelisted, does Declude bypass the virus filtering and
allow the email to pass through?
Jon Lucas
Poly-Cast, Inc.
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.Virus
Of David
Barker
Sent: Friday, October 05, 2007 11:27 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
Ok so if you revert to .57 the issue goes away correct.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Send them directly to me.
David
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Friday, October 05, 2007 12:15 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
I have not reverted to .57
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, October 04, 2007 9:53 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties
Hi,
I put in 4.3.62 in this afternoon (was running a different
Thanks for the feedback we are looking at it as #1 priority at the moment.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Friday, October 05, 2007 2:09 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.3.62 countless false positives for
vulnerabilties
Ok so if you revert to .57 the issue goes away correct.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Friday, October 05, 2007 11:18 AM
the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
in multipart
processing.
09/19/2007 09:07:08.918 q492300cc5430.smd Scanned: Virus Free [MIME: 4
345642]
John T
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
hi, i just received 2 ticket numbers but 1 haven't posted anything. do you have
any problems around?
bernd goebbels
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 30. August 2007 12:15
An: declude.virus
How do I turn this off.
I am having emails held as virus but they are not.
They do contain pdfs and doc files.
Could not find it in the manual.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
distributed among about
550 accounts across 100 domains.
Shayne Embry
Original Message
From: Heimir Eidskrem [EMAIL PROTECTED]
Sent: Tuesday, July 31, 2007 2:53 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] [Invalid ZIP Vulnerability]
How do I turn this off
, and
include a link to a script to requeue the message for delivery.
Darin.
- Original Message -
From: Shayne Embry [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, July 31, 2007 5:09 PM
Subject: re: [Declude.Virus] [Invalid ZIP Vulnerability]
Not too sure you'd want
not viruses they are definitely spam. I'm catching about 40 per hour, widely distributed among about 550 accounts across 100 domains.
Shayne Embry
Original Message
From: Heimir Eidskrem [EMAIL PROTECTED]
Sent: Tuesday, July 31, 2007 2:53 PM
To: declude.virus@declude.com
Subject
: Tuesday, July 31, 2007 4:23 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] [Invalid ZIP Vulnerability]
We got slammed with them today as well. It caught a bunch that made it
past
spam filtering (we run AVAFTERJM ON). So I'd second that recommendation
to
NOT turn it off. If you're
The point is you may let some not-yet-detected viruses through, but in any case
you can do that with a switch in the virus.cfg.
Darin.
- Original Message -
From: Heimir Eidskrem
To: declude.virus@declude.com
Sent: Tuesday, July 31, 2007 6:23 PM
Subject: Re: [Declude.Virus] [Invalid
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darin Cox
Sent: Tuesday, July 31, 2007 5:34 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] [Invalid ZIP Vulnerability]
We use this vulnerability.eml
-- Begin vulnerability.eml
Yep. You can use SKIPIFVIRUSNAMEHAS at the top of the vulnerability.eml
file to specify the vulnerability you don't want to notify on.
Darin.
- Original Message -
From: Jared Pickerell [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, July 31, 2007 6:49 PM
Subject: RE
,
or is this specific to which scanner(s) I am using?
Thanks
Jared
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darin Cox
Sent: Tuesday, July 31, 2007 6:40 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] [Invalid ZIP Vulnerability]
Yep. You can use
Scott,
What version of Declude ?
Are you using the directive AVAFTERJM ON?
David
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Friday, July 27, 2007 3:06 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] exe in zip file why not blocked
Declude 4.3.57
AVAFTERJM ON YES.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 7:48 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] exe in zip file why not blocked...
Scott
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] exe in zip file why not blocked...
Declude 4.3.57
AVAFTERJM ON YES.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 7:48 AM
David, the log snipped posted is of the Declude Virus log, meaning it passed
Junkmail and was scanned.
John T
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 9:24 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] exe
the issue.
David
*From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of
*Scott Fisher
*Sent:* Monday, July 30, 2007 10:27 AM
*To:* declude.virus@declude.com
*Subject:* RE: [Declude.Virus] exe in zip file why not blocked...
Declude 4.3.57
AVAFTERJM ON YES
John I saw that, but I am not sure how much of the virus code is executed
once the JM threshold is met.
David
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(lists)
Sent: Monday, July 30, 2007 12:55 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] exe
] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 11:24 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] exe in zip file why not blocked...
AVAFTERJM ON means if the email reaches the JM either HOLD or DELETE to not
call the AV in the Declude code. Try
301 - 400 of 7920 matches
Mail list logo
