in Service and Support
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Fax: 604-638-6020
Toll Free: 1-877-503-9870
http://www.pacificonline.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Weber
Sent: Tuesday, July 18, 2006 1:01 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] DrWatson errors
I just
] On Behalf Of
David Weber
Sent: Tuesday, July 18, 2006 1:01 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] DrWatson errors
I just activated Declude 4.2 with SmarterMail on Windows 2003 server -
Virus
only. I activated it last night and there have been 3 DrWatson errors
already today
:46 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] DrWatson errors
I'm also seeing 3 or 4 application errors a day.
I see the following in our event logs:
Faulting application decludeproc.exe, version 0.0.0.0,
faulting module decludeproc.exe, version 0.0.0.0, fault
Make sure you have a virus.cfg file in your \Declude directory with the
VIRDIR set.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John
Dobbin
Sent: Tuesday, July 18, 2006 5:07 PM
To: declude.virus@declude.com
Subject: RE
MAIL PROTECTED] [outgoing from ##.##.48.210]
07/17/2006 06:32:41.269 q674000a2e465.smd Subject: FW: M341092022 /
M341092023
Thanks,
Matt
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus&qu
And Imail. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
- Original Message -
From:
Matt
To: declude.virus@declude.com
Sent: Tuesday, July 18, 2006 7:48
PM
Subject: [Declude.Virus] Invalid file
types triggering
.
-
Original Message -
From:
Matt
To:
declude.virus@declude.com
Sent:
Tuesday, July 18, 2006 7:48 PM
Subject:
[Declude.Virus] Invalid file types triggering on an invalid file type
I found a message blocked for an "Invalid ZIP Vulnerab
Your command lines exactly matches my Clamav lines which are working.
I'm using Declude 3.x
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, July 14, 2006 4:43 PM
Subject: [Declude.Virus] Declude error, not ClamAV error
Upon
the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
7:08 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Declude error, not ClamAV error
I get the error no matter what the virus, Netsky, Bagle, Feebs, even when
ClamAV
detects a fishing attempt the error is there.
Original Message
From: John T \(Lists
: John T \(Lists\) [EMAIL PROTECTED]
Sent: Saturday, July 15, 2006 2:13 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Declude error, not ClamAV error
Have you tried running the command line by itself against a file in question
to see what the return code is?
John T
eServices
FOUND
Is anyone else experiencing this, or have any ideas?
Thanks,
Gary
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
, VIRUSCODE2, REPORT2 to 3. That might help
Goran Jovanovic
Omega Network Solutions
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, July 14, 2006 1:16 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] ClamAV error
I recently
AVG is my first one (it's everybody's first one, it's built in).
Original Message
From: Goran Jovanovic [EMAIL PROTECTED]
Sent: Friday, July 14, 2006 3:26 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] ClamAV error
Gary,
You said CLAM was your third AV
Upon further research, the statement Attachment=[Unknown: Err] is generated
by Declude, not ClamAV. So does Declude have a problem with ClamAV?
Original Message
From: Gary Steiner [EMAIL PROTECTED]
Sent: Friday, July 14, 2006 1:32 PM
To: declude.virus@declude.com
Subject
To: declude.virus@declude.com
Subject: [Declude.Virus] Declude error, not ClamAV error
Upon further research, the statement Attachment=[Unknown: Err] is
generated by
Declude, not ClamAV. So does Declude have a problem with ClamAV?
Original Message
From: Gary Steiner [EMAIL
I get the error no matter what the virus, Netsky, Bagle, Feebs, even when
ClamAV detects a fishing attempt the error is there.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Friday, July 14, 2006 9:46 PM
To: declude.virus@declude.com
Subject: RE
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 05:46 PM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.Virus] 4.2.20 Error in Log
Since upgrading to 4.2.20 I started seeing the following error:
07/12/2006 00
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 08:34 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.20 Error in Log
Andy,
Besides AVG I have 3 scanners: listed in order (F-Prot, Clam AV, McAfee).
I do think
BUILTINSCANNEROFF
Located in Virus.cfg. Will disable the internal AVG scanner.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, July 13, 2006 8:34 AM
To: declude.virus@declude.com
To turn off the internal scanner BUILTINSCANNEROFF
Located in Virus.cfg. Will disable the internal AVG scanner.
Chris
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Thursday, July 13, 2006 8:58 AM
To: declude.virus@declude.com
Your pretty quick for a pinata
Chris
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Asaro
Sent: Thursday, July 13, 2006 9:10 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] 4.2.20 Error in Log
To turn off the internal scanner
: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 05:46 PM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.Virus
] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, 06 July 2006 4:51 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.3 Built-in scanner
John,
What problems are you having with scan.exe? A lot of us use McAfee and have
no issues.
Darrell
al Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, 06 July 2006 4:51 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2.3 Built-in scanner
John,
What problems are you having with scan.exe? A lot of us
EXTERNAL McAfee Scanner?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
To: declude.virus@declude.com
Subject: [Declude.Virus] Ambiguous Virus Scanner ID in log
Hi Dave,
My log indicates:
07/12/2006 17:34:20.625 q6ad4014a0137.smd Vulnerability flags = 0
07/12/2006 17:34:21.593 q6ad4014a0137.smd Virus scanner 1 reports exit
code of 0
Which one is considered Virus scanner
be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 05:46 PM
To: declude.virus@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.Virus] 4.2.20 Error in Log
Since upgrading to 4.2.20 I started seeing the following error
!
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Your Email security is our businessT
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail
ALLOWVULNERABILITY NONSTANDARDHDR
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, July 07, 2006 11:08 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] 4.2 build 20 Released 6 July 2006
David
Thanks. That does help.
Matt
David Barker wrote:
ALLOWVULNERABILITY NONSTANDARDHDR
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Friday, July 07, 2006 11:08 AM
To: declude.virus@declude.com
Subject: Re
I see fixes to code that should also exist in v3.1. Have you abandoned
development on v3.x?
Evans Martin
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, July 07, 2006 9:42 AM
To: Declude.Virus@declude.com
] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, July 07, 2006 9:42 AM
To: Declude.Virus@declude.com; Declude.JunkMail@declude.com
Subject: [Declude.Virus] 4.2 build 20 Released 6 July 2006
EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to
have broken
11:44 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] 4.2.3 Built-in scanner
Declude 4.2.3 Diagnostics right on the top line.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Carter
Sent: Thursday, 11 May 2006 9:30 AM
To: Declude.Virus
]
[mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett
Sent: Thursday, 11 May 2006 11:44 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] 4.2.3 Built-in scanner
Declude 4.2.3 Diagnostics right on the top line.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
: 800.867.0473
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
In your virus.cfg, make sure you have this:
BANCRVIRUSESON
and do not have this:
ALLOWVULNERABILITY OLCR
That should do it.
Original Message
From: Rick O'Connor [EMAIL PROTECTED]
Sent: Saturday, July 01, 2006 1:19 PM
To: declude.virus@declude.com
Subject
: Tuesday, June 27, 2006 2:32 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
Some of us has noted in the past two hours that messages with an zip-file as
attachment has passed our virus filters
It's a zip-file containing a MS Word Document named
: Tuesday, June 27, 2006 7:04 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
John,
Not to say that this wouldn't be something that is nice to have, I can think
of dozens of things that are very largely useful on a much more regular
basis
:[EMAIL PROTECTED] On
Behalf Of Marc Catuogno
Sent: Wednesday, June 28, 2006 6:03 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
Um, no making fun here - I opened it. I thought it was just
spam someone forwarded it to my spam
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Tuesday, June 27, 2006 5:48 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
Is the word document only named that?
John T
vulnerability test NONSTANDARDCRLF will be included to check
for the end of the headers.
David B
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, June 27, 2006 7:04 PM
To: declude.virus@declude.com
Subject: Re
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Declude EVA to fail decoding
3. WHITELIST IP being applied before IPBYPASS
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, June 28, 2006 1:49 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New
PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
David,
I'm just wondering about the issue with the invalid characters in the Mail
From's that caused massive spam leakage almost a month ago. Is this too
supposed to be fixed?
I'm also very
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, June 27, 2006 7:04 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
John,
Not to say that this wouldn't
level, have you contacted Imail and asked
for their response and/or fix ?
David B
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, June 28, 2006 2:48 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New
to handle
viruses and spammers.
Mike
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of David Barker
Sent: Wednesday, June 28, 2006 3:08 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
Matt
scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
extension? We all know that relaying
on users to not open attachments is problematic.
John T
eServices For You
Seek, and ye shall find!
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
David,
The CRLF thing doesn't affect me since I have my own solution, however for
those that use Subject tagging, adding another test won't help unless they
decide to just simply delete
. But I'm not looking forward to hand
correcting 120 of these a month.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Wednesday, June 28, 2006 2:07 PM
Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
Matt,
The CRLF
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
Back to the matter indicated in the subject line, how are
others dealing with this?
Is F-Prot and AVG and others catching this now?
Which AV scanners are indeed catching it?
Now for the bigger
PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Colbeck, Andrew
Sent: Wednesday, June 28, 2006 2:14 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
I haven't seen any yet; I don't know if F-Prot is catching them.
From the published
2:26 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus
Importance: Low
I don't know where that character in front of my From sentence came
from. The first character on that line should have been an F.
It must be some kind of weird
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
Will be out all of next week (6/26-6/30, 7/3). I will be returning on July
5th.
In my absence please see John Hardy or John Hultgren for any
network/email/internet issues.
For any other issues or like GMI issues please see Cathy Frank.
---
This E-mail came from the Declude.Virus
BANNAME dell_prices.zip
BANNAME My_Notebook.doc
Regards
Markus
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
sony_prices.zip
BANNAME hp_prices.zip
BANNAME dell_prices.zip
BANNAME My_Notebook.doc
Regards
Markus
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
Check out http
PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Tuesday, June 27, 2006 12:08 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
Actually, it is CLAMAV catching it. Not sure about McAfee as
I stop
Is the word document only named that?
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus
Gufler
Sent: Tuesday, June 27, 2006 11:32 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] New
As I know yes but
BANNAME my_notebook.doc
wouldn't work for files within zip-archives.
Markus
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of John T (Lists)
Sent: Tuesday, June 27, 2006 11:48 PM
To: declude.virus@declude.com
Subject: RE
I know. :(
Declude, this is a feature who's time has come.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus
Gufler
Sent: Tuesday, June 27, 2006 3:10 PM
To: declude.virus@declude.com
Subject
:[EMAIL PROTECTED] On
Behalf Of John T (Lists)
Sent: Tuesday, June 27, 2006 3:38 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus: zipped word doc with
Macro-Virus
Importance: High
I know. :(
Declude, this is a feature who's time has come.
John T
eServices
. :(
Declude, this is a feature who's time has come.
John T
eServices For You
"Seek, and ye shall find!"
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Markus
Gufler
Sent: Tuesday, June 27, 2006 3:10 PM
To: declude.virus@declude.com
S
214-596-2464
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
This came up just last Friday, Mark.
Here's the end of that thread on the mail archive
website:
http://www.mail-archive.com/declude.virus@declude.com/msg13314.html
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent:
Thursday, June 22
, June 22, 2006 6:16
PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Entry
in Event Log
This came up just last Friday, Mark.
Here's the end of that thread on the mail
archive website:
http://www.mail-archive.com/declude.virus@declude.com/msg13314.html
Andrew 8
can you please add this to the to do list
Thank you
Goran Jovanovic
Omega Network Solutions
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail
Added to the development wish list.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 2:12 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] New feature needed
Hi,
I would like
David,
Any idea when it might make it as a feature in the code?
Goran Jovanovic
Omega Network Solutions
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David
Barker
Sent: Tuesday, June 20, 2006 2:58 PM
To: declude.virus@declude.com
Subject: RE
Original Message
From: Goran Jovanovic [EMAIL PROTECTED]
Sent: Tuesday, June 20, 2006 2:30 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] New feature needed
Hi,
I would like to suggest a new feature to be added to the virus
notification capabilities.
Right now
an extra layer to the mail movement, but it works for now.
David
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
:[EMAIL PROTECTED] On Behalf Of
Gary
Steiner
Sent: Tuesday, June 20, 2006 3:24 PM
To: declude.virus@declude.com
Subject: re: [Declude.Virus] New feature needed
I asked about the possibility of per domain replies several months
ago. I
would hope that it has already been placed on the wish
06.20.2006
no virus found
VirusBuster
4.3.7:9
06.20.2006
I-Worm.Bagle.ZIP.Gen
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype &q
Goran Jovanovic
Omega Network Solutions
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Not sure yet, but not for at least the next 60 days.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 3:23 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature
zombie due to the reverse DNS I noted. I
submitted my sample to Trend and to ClamAV.
Andrew
8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary SteinerSent:
Tuesday, June 20, 2006 12:42 PMTo:
declude.virus@declude.comSubject: [Declude.Virus] another new
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 3:23 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature needed
David,
Any idea when it might make it as a feature in the code
:
declude.virus@declude.comSubject: RE: [Declude.Virus] another new
virus
Ditto.
F-Prot notices that the zip file is password protected
and I can see that there is a very-Bagle-ish gif fileof the
password.
David Barker's earlier response of
using:
BANEXT
EZIP
in your
Is
anyone else seeing new virus zip files getting past F-Prot?
the
last one was just numbers.zip
Earlier a few came through with
name.zip
Bruce
Loughlin
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubs
If they are encrypted zips ensure you
have:
BANEXT EZIP
in your virus.cfg
David B
www.declude.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bruce LoughlinSent:
Friday, June 16, 2006 4:31 PMTo:
declude.virus@declude.comSubject: [Declude.Virus] new
virus
Is
anyone
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E
.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Ncl Admin
Sent: Friday, June 16, 2006 2:03 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] new virus
Yes,
04dotzip just came through here but McAfee stopped it. But
F
Backdoor.Naninf.E
TheHacker 5.9.8.160 06.16.2006 no virus found
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Colbeck, Andrew
Sent: Friday, June 16, 2006 2:21 PM
To: declude.virus@declude.com
Subject: RE
Of
Colbeck, Andrew
Sent: Friday, June 16, 2006 5:31 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] new virus
This is what I've received recently:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR%5FB
REPBOT%2EAVSect=T
My F-Prot and Trend Micro do detect
, SURBL/URI integration, MRTG
Integration, and Log Parsers.
- Original Message -
From: Goran Jovanovic [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, June 16, 2006 6:04 PM
Subject: RE: [Declude.Virus] new virus
My F-Prot is finding it but it does not know what it is. Both
, 2006 6:59 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] new virus
Goran,
Do you have exit code 8 also listed for F-Prot in your virus.cfg? If
not
you should.
Darrell
Check out http
/Mitglieder.gen
Won't pick up the name because Infection: simply wasn't in the line.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Friday, June 16, 2006 4:18 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus
on the desktop named sign in_files with the images associated with
the page.
I want to keep it from happening again.
thanks, bob
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus
page that was referenced in the spam e-mail
and a folder on the desktop named sign in_files with the images associated with
the page.
I want to keep it from happening again.
thanks, bob
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL
bet is to take that machine offline and
rebuild it from known good sources.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Bob McGregor
Sent: Wednesday, June 14, 2006 11:37 AM
To: Declude-List
Subject: [Declude.Virus] the ebay spoof spam
Another Test for the
Virus System
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
Services
519-741-1222
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of David Barker
Sent: Tuesday, June 13, 2006 6:59 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Growing Pains
To all Declude users:
I
.
302-529-8640
[EMAIL PROTECTED]
[This E-mail scanned for viruses by Declude EVA]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
901 - 1000 of 7920 matches
Mail list logo
