I did contact f-prot now the second time. I did not get an answer till now.
Uwe
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, May 03, 2005 3:21 AM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
The sign*.def files
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Monday, May 02, 2005 2:03 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
F-Prot may have pulled the latest defs do to the number of complaints
received, which could explain why
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
Hello,
in the moment I got this email from F-prot support:
Unfortunately, virus signature files released at 17:00 on 2 May 2005
included a false positive detection identified as: Infection:
HTML/[EMAIL PROTECTED
I tested it the last hours and had no FP since the new update.
Uwe
- Original Message -
From: Chris Fitch [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, May 03, 2005 4:44 PM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
I have these installed and appears
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Wind
Sent: Tuesday, May 03, 2005 8:04 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I tested it the last hours and had no FP since the new update.
Uwe
- Original Message -
From: Chris Fitch
, Andrew
Sent: Tuesday, May 03, 2005 9:13 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Agreed, the current *.def files no longer trigger on my sample
false-positive files.
Also, I had exactly the same message from F-Prot support waiting for me
Thank you for the tip, John.
I searched the logs and since the update there are legitimate E-mail, which
are caught.
Uwe
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 7:46 PM
Subject: [Declude.Virus] F-Prot
Yes, this is a problem! I rolled back to my latest defs prior to the last
update and all is well again. I disabled my updates for a while to see if
F-Prot fixes this issue.
Bill
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent:
I am having the same problems here. It all started around 12:30 Central
time...
Don
- Original Message -
From:
Matt
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 12:56 PM
Subject: Re: [Declude.Virus] F-Prot and
HTML object exploit
John,Thanks a bunch
Hickey
Sent: Monday, May 02, 2005
11:14 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus]
F-Prot and HTML object exploit
I am having the same problems here. It all started
around 12:30 Central time...
Don
- Original Message -
From: Matt
How can I roll back ??
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 2:12 PM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
Yes, this is a problem! I rolled back to my latest defs prior to the last
I'm having the same problem. Again - how do you rollback the virus defs?
Wind wrote:
Thank you for the tip, John.
I searched the logs and since the update there are legitimate E-mail,
which are caught.
Uwe
- Original Message - From: John Tolmachoff (Lists)
[EMAIL PROTECTED]
To:
Sent: Monday, May 02, 2005 11:50 AM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
How can I roll back ??
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 2:12 PM
Subject: Re: [Declude.Virus] F-Prot and HTML
- Original Message - From: Jeff [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 11:50 AM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
How can I roll back ??
- Original Message - From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent
Question: Have you all running the latest v3.16b ?
I can't see any appearance of HTML/ObjData in the entire current logfile,
but I've still running 3.16a
Markus
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Tolmachoff (Lists)
Sent:
Markus,
3.16b here, but only 3 hits so far for this on a busy server, so it's
not necessarily common. I was able to capture one of these and it
appears to be hitting at least E-mails generated in "Microsoft Word 11".
META HTTP-EQUIV="Content-Type"
CONTENT="text/html; charset=us-ascii"
meta
I have not updated to 3.16b and have this problem...
Don
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 3:09 PM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Question: Have you all running the latest
I've been running 3.15b - I'm downloading the latest version now.
Should I install? or will this have no effect on this particular issue?
And what about the previous defs - anyone out there want to email me a
previous def file as a work around??
Thanks
Kevin
Markus Gufler wrote:
Question:
created with Office 10 or Office 11.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Monday, May 02, 2005 1:10 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Question: Have you all
]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 1:36 PM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I've been running 3.15b - I'm downloading the latest version now.
Should I install? or will this have no effect on this particular issue?
And what about the previous
or Office 11 headers
or were replies to messages created with Office 10 or Office 11.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Monday, May 02, 2005 1:10 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot
, 2005 1:54 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I also filled out the form at FProt's site. Thanks for the defs. When
I open up FProt, though, it says that my defs are up-to-date, even
though I replaced the newest ones with the ones
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I also filled out the form at FProt's site. Thanks for the defs. When
I open up FProt, though, it says that my defs are up-to-date, even
though I replaced the newest ones with the ones that you sent. I hope
that that message indicates
PROTECTED] On Behalf Of Bill Landry
Sent: Monday, May 02, 2005 2:03 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
F-Prot may have pulled the latest defs do to the number of complaints
received, which could explain why the app reports that you have the
latest
24 matches
Mail list logo