Re: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread Dan Shadix
F-Prot. Cost is next to nothing and it works great with Declude. Dan -- Original Message -- From: Keith Johnson [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 2 Dec 2002 22:56:30 -0500 I wanted to see what type of virus scanner everyone has

Re: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread Helpdesk
on 12/3/02 9:30 AM, Dan Shadix wrote: F-Prot. Cost is next to nothing and it works great with Declude. I agree. Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an

RE: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread John Tolmachoff
F-Prot. Cost is next to nothing and it works great with Declude. I agree. I third that motion. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus

RE: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread John Tolmachoff
F-Prot seems to be the flavor. Do you guys run (under Windows 2000 Server) the DOS version, Windows version or the F-Secure version. Windows 2000 Server using F-Prot DOS version. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com

RE: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread Keith Johnson
John, Thank you for the info. With the Dos Version, how are you getting your auto sig updates and on what interval can you obtain these. -Original Message- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 03, 2002 11:12 AM To: [EMAIL PROTECTED] Subject:

RE: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread John Tolmachoff
With the Dos Version, how are you getting your auto sig updates and on what interval can you obtain these. There are a couple of scripts that people have come up with that are listed on the Declude web site. I have this set to run as scheduled task every 4 hours, plus F-Prot has a e-mail

[Declude.Virus] F-Prot Updater Question

2002-12-03 Thread Dan Star
Does the F-Prot Updater for Windows use ftp behind the scenes? -- Dan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.Virus] F-Prot Updater Question

2002-12-03 Thread Jeff Maze - Hostmaster
I'm not sure. I e-mail them yesterday to ask as well. Putting in a new firewall and want to make sure I configure it correctly so f-prot can get the updates. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Star Sent: Tuesday, December 03, 2002

Re: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread David Delbridge
FYI, we are running the same config. Our approach was to write and schedule a ColdFusion agent to download, unzip and install the F-Prot updates. I am happy to share, if you're doin' the ColdFusion thing. Dave Thank you for the info. With the Dos Version, how are you getting your auto sig

[Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread John Tolmachoff
Any one see how this is passed through e-mail yet? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the

H:Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Paul Ingram
CI Travel X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 5 (Req: 18) Tot: 5 (Req: 20) X-RBL-Warning: XBL: 163.41.34.208.xbl.selwerd.cx. X-Declude-Sender: [EMAIL PROTECTED] [208.34.41.163] X-Declude-Spoolname: D0b76652e03caa7c8.SMD X-Note: This E-mail was scanned for viruses by Declude

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread John Tolmachoff
Now this one looks bad. I am blocking .pif files but not sure what the .ceo is about. The only CEO's don't usally infect anything just slow stuff down. :) I guess i need to find that link on file types. http://filext.com/ .CEO Extension associated with Winevar Worm (The worm sets .CEO

H:Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Paul Ingram
CI Travel X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 5 (Req: 18) Tot: 5 (Req: 20) X-RBL-Warning: XBL: 163.41.34.208.xbl.selwerd.cx. X-Declude-Sender: [EMAIL PROTECTED] [208.34.41.163] X-Declude-Spoolname: D13d62cb1066e5efd.SMD X-Note: This E-mail was scanned for viruses by Declude

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread John Tolmachoff
I guess that goes in to banext I just added it. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus

Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Kris McElroy
What is extensions is everyone blocking in general? I am blocking scr, pif, ceo ? Should I be blocking any thing else? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net - Original Message - From: John Tolmachoff [EMAIL PROTECTED] To:

H:Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Paul Ingram
CI Travel X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 5 (Req: 18) Tot: 5 (Req: 20) X-RBL-Warning: XBL: 163.41.34.208.xbl.selwerd.cx. X-Declude-Sender: [EMAIL PROTECTED] [208.34.41.163] X-Declude-Spoolname: D1cc9d50003ca5674.SMD X-Note: This E-mail was scanned for viruses by Declude

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Madscientist
I just reviewed my banned extensions in light of this. Has an ALLOWEXT option been discussed? That might be better. For example ALLOWEXT ZIP ALLOWEXT GZ ALLOWEXT TXT ... If ALLOWEXT were used then any other extension not shown with an allowext tag would be rejected. That way, it's a lot easier

RE: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Trent M. Davenport
The WHTV email server blocks all attachments that have the file extensions: ADE, ADP, BAS, BAT, CEO, CHM, CMD, COM, CPL, CRT, EXE, HLP, HTA, ING, INS, ISP, JS, JSE, LNK, MDB, MDE, MSC, MSI, MSP, MST, PCD, PIF, REG, SCR, SCT, SHS, VB, VBE, VBS, WSC, WSF,and WSH as an anti-virus measure. This is

[Declude.Virus] Banned Extension

2002-12-03 Thread Kami Razvan
Title: Message Hi; The following is what we use and we got it from this list: - hope it helps. http://support.microsoft.com/default.aspx?scid=KB;en-us;291369 Regards, Kami # Banned Extensions

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Greg Foulks
Here is the list of Banned Extension that I use T BANEXT REG BANEXT LNK BANEXT CMD BANEXT CPL BANEXT JS BANEXT JSE BANEXT MSI BANEXT MSP BANEXT PCD BANEXT SCT BANEXT SHB BANEXT SHS BANEXT VB BANEXT VBE BANEXT WSC BANEXT WSF BANEXT WSH BANEXT CEO BANEXT OCX BANEXT NWS BANEXT VBX BANEXT DLL BANEXT

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Bill B.
I block all of the ones MS Outlook blocks, plus this .CEO extension. But I also would be interested to here if there are others... http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram

[Declude.Virus] H:OT anyone using The Bat email prog??

2002-12-03 Thread Paul Ingram
CI Travel X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 0 (Req: 18) Tot: 0 (Req: 20) X-RBL-Warning: XBL: 163.41.34.208.xbl.selwerd.cx. X-Declude-Sender: [EMAIL PROTECTED] [208.34.41.163] X-Declude-Spoolname: D224c093f0600decb.SMD X-Note: This E-mail was scanned for viruses by Declude

RE: Re: [Declude.Virus] New virus: W95/CIH-1106 New variant of Chernobyl

2002-12-03 Thread Royce Fessenden
Add my name to the list of those who would love to have the ability to block everything but Allowed Extensions. Royce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist Sent: Tuesday, December 03, 2002 3:08 PM To: [EMAIL PROTECTED] Subject:

Re: [Declude.Virus] Opinion on Virus Scanner

2002-12-03 Thread Bonno Bloksma
Hi, F-Prot seems to be the flavor. Well the only reason *I* switched from Sophos to F-prot was the reporting function. However it seems that Sophos has this reporting now as well so somewhere next year I will probably switch back to Sophos. BTW Scott, did someone figure out the commandline and

Re: [Declude.Virus] H:OT anyone using The Bat email prog??

2002-12-03 Thread R. Scott Perry
Evrytime I reply to a [EMAIL PROTECTED] or [EMAIL PROTECTED] The Bat puts an H befor my subject. It is not there when I send only once I see it on the list. Declude JunkMail sees that you have a header of just CI Travel, which isn't a valid header, and could be causing that. A valid header

[Declude.Virus] Ban/Allow extensions

2002-12-03 Thread John Tolmachoff
I think this warrants its own posting. I just reviewed my banned extensions in light of this. Has an ALLOWEXT option been discussed? That might be better. Add my name to the list of those who would love to have the ability to block everything but Allowed Extensions. I am not sure that is the