RE: [Declude.Virus] Mcafee

2004-02-25 Thread R. Scott Perry
It's Mcafee Virus Scan Ver 8.0 Build 8.0.26 There isn't a scan.exe or scan32.exe on the drive. You'll need to do a Full Install. That should get the scan.exe installed. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

Re: [Declude.Virus] W32.Netsky.B@mm Slipping through

2004-02-25 Thread R. Scott Perry
I realize this generally does mean it's corrupt -- but you're missing the scary part. If I scan the file that came in with the same install of F-Prot, (from the mail server), it catches it as Netsky. If scanning it from F-Prot on the mailserver catches it, it should get caught when Declude

RE: [Declude.Virus] Banning zips and user able to requeue.

2004-02-25 Thread R. Scott Perry
Scott, feature request: If the banned extension is zip, instead of sending out BanNotify.eml, can Declude be configured to send BanZipNotify.eml? That would allow flexibility to only do this for zip files. We're looking into some options here.

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Gene Head
Scott, I've re-installed it a couple of times but I haven't seen anywhere that I can tell it to do a full install. Does anyone have this version? Gene Head ACCRAM Inc. MCP,Net+,A+,CCNA,CCDA [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.Virus] Mcafee

2004-02-25 Thread R. Scott Perry
I've re-installed it a couple of times but I haven't seen anywhere that I can tell it to do a full install. You'll need to contact McAfee then to see how to do a Full Install (or at least how to get the scan.exe file installed). -Scott ---

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Darrell LaRock
I believe you have the consumer version. The corporate version is still at version 7.1. I know the corporate version has the scan/scan32.exe files. Darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gene Head Sent: Wednesday, February 25, 2004

[Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread niceman
We're seeing the same thing David did - random error 5's on the newest F-prot. I backed off to the previous version. Is there a way to rescan the error 5's using Declude from the command line if I create a batch file? --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread Bill Landry
Scott, if Declude Virus encounters an Error 5 with scanner 1, does it not even attempt to run the message through the second scanner? Normal virus detected without Error 5: = 02/25/2004 05:32:05 Qa3d35c70b2d0 Scanner 1: Virus= W32/[EMAIL PROTECTED] Attachment=part3.zip [14] O 02/25/2004

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Gene Head
Do you have a part number/SKU for that? I've called Mcafee and can't seem to get them to understand what I need. They do have a version called VirusScan ASAP but they can't tell me if it has scan.exe. Gene -- Original Message -- From: Darrell LaRock

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Kami Razvan
Gene: If you review the archives you will see a great discussion on this topic. We did this research a while back and finally gave up.. The final word was McAfee requires you to buy a license for every mailbox you have. If you are an ISP then this makes no sense. There is no such thing as a

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Darrell LaRock
Unfortunately, I do not have a SKU. However, this link will take you to the product. http://www.networkassociates.com/us/products/mcafee/antivirus/desktop/vs.htm Don't be scared by the word desktop. VS 7.0 has both the server and desktop version built into the installer. Also, the current

[Declude.Virus] Error 9 in AVG

2004-02-25 Thread Kami Razvan
Scott: We are seeing errors in our other scanners. At first I thought Error 5 was because of F-Prot's new C release. But now we are seeing Error 9 in AVG as well. I just saw a virus get through and that is how I realized what is going on. could this be with the i4 release of Declude

Re: [Declude.Virus] Error 9 in AVG

2004-02-25 Thread R. Scott Perry
We are seeing errors in our other scanners. At first I thought Error 5 was because of F-Prot's new C release. But now we are seeing Error 9 in AVG as well. That means that AVG is reporting an error 9. Unfortunately, we have no information on what will cause AVG to report an error 9. Most

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread R. Scott Perry
Scott, if Declude Virus encounters an Error 5 with scanner 1, does it not even attempt to run the message through the second scanner? It should call both scanners, no matter what. 02/25/2004 08:50:21 Qd23b256a001cfa29 Could not find parse string Infection: in report.txt 02/25/2004 08:50:21

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread R. Scott Perry
We're seeing the same thing David did - random error 5's on the newest F-prot. I backed off to the previous version. Is there a way to rescan the error 5's using Declude from the command line if I create a batch file? You could try copying the files back to the spool directory, and then

RE: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread Markus Gufler
We're seeing the same thing David did - random error 5's on the newest F-prot. I backed off to the previous version. Same thing here. While going back to 3.14b I've noticed that the missing fpcmd.exe causes the following lines in the logfile: (3.14c must be removed before reinstalling

RE: [Declude.Virus] Error 9 in AVG

2004-02-25 Thread Markus Gufler
could this be with the i4 release of Declude or it just happens that both of our scanners are now returning error. Running 1.78 beta here. Shows also error 5 in f-prot 3.14c. Using Fprot 3.14b hasn't caused any error 5. Markus --- [This E-mail was scanned for viruses by Declude Virus

RE: [Declude.Virus] Error 9 in AVG

2004-02-25 Thread Gene Head
We aren't seeing any errors from the scanners since updateing to 3.14c We are running: Declude 1.77i9 F-prot 4.14c as scanner 1 AVG version 6.0.594 Witht the following virus config: SCANFILE1 C:\Progra~1\FSI\F-Prot\f-prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /PACKED /NOFLOPPY /NOBOOT /DUMB #

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread niceman
Can Declude be run from a folder other than the main IMail spool folder? - in which case a good message would not be moved to a virus subfolder. Alternatively, can I temporarily stop the queue manager to run the scan? Thanks, You could try copying the files back to the spool directory,

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-25 Thread R. Scott Perry
Can Declude be run from a folder other than the main IMail spool folder? - in which case a good message would not be moved to a virus subfolder. The Declude.exe file should be in the \IMail directory, and the scanned files really should be in the spool. Using other directories may work, but

[Declude.Virus] W32/Netsky.c@MM - new

2004-02-25 Thread Patrick Childers
There's a new variant out. http://vil.nai.com/vil/content/v_101048.htm ~Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To

Re: [Declude.Virus] W32/Netsky.c@MM - new

2004-02-25 Thread Bill Landry
Wow, F-Prot is johnny-on-spot and catching these with the latest definition from about an hour ago. However, RAV and TrendMicro are not catching this one yet.. Bill - Original Message - From: Patrick Childers (by way of R. Scott Perry [EMAIL PROTECTED]) [EMAIL PROTECTED] To: [EMAIL

[Declude.Virus] AVG Updating

2004-02-25 Thread Bill Newberg
I am adding AVG on a trial basis as a third scanner with F-Prot and McAfee. In the create scheduled update settings, there is a choice between Priority Update, Recommended Update and Optional Update. Does anyone know which setting will automatically download ALL updates for AVG? BTW - Matt, thank

Re: [Declude.Virus] W32/Netsky.c@MM - new

2004-02-25 Thread Darin Cox
Looks like F-Prot is calling it W32/Bizex.A ... unless there's another one today... Darin. - Original Message - From: Bill Landry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 1:26 PM Subject: Re: [Declude.Virus] W32/[EMAIL PROTECTED] - new Wow, F-Prot is

RE: [Declude.Virus] Mcafee

2004-02-25 Thread Gene Head
Thanks for the link. I called them to get a price and ran into another brick wall. Very frustrating. Do you remember where you bought it and what you paid? Gene -- Original Message -- From: Darrell LaRock [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED]

RE: [Declude.Virus] W32/Netsky.c@MM - new

2004-02-25 Thread John Tolmachoff \(Lists\)
AVG is also catching it now. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Wednesday, February 25, 2004 10:27 AM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.Virus] Mcafee

2004-02-25 Thread R. Scott Perry
Thanks for the link. I called them to get a price and ran into another brick wall. McAfee is like that. Their normal MO, though, is to oversell, doing everything short of blatant lying to do so. What you may want to do is try asking them I have one computer running Windows XYZ (for example,

Re: [Declude.Virus] W32.Netsky.B@mm Slipping through

2004-02-25 Thread Jonathan
Doubtful - we've been catching the same Netskys both before and after these slipped through. Hundreds of em. Jonathan At 06:43 AM 2/25/2004, you wrote: I realize this generally does mean it's corrupt -- but you're missing the scary part. If I scan the file that came in with the same install

[Declude.Virus] BANnotify.eml

2004-02-25 Thread David Dodell
Can someone send me a copy of their Bannotify.eml ... David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

[Declude.Virus] Another error

2004-02-25 Thread serge
Hi scott I have a lot of these any hints ? 02/24/2004 16:39:12 Q7b5e15400292c67d Error opening mime file E:\IMAILSRVR\spool\D7b5e15400292c67d.SMD02/24/2004 16:39:12 Q7b5e15400292c67d Scanned: Error starting scanner ===

Re: [Declude.Virus] BANnotify.eml

2004-02-25 Thread Adrian Hauri
go to http://www.declude.com/virus/manual.htm to get the latest update. Cheers Adrian - ToadShow Pty Ltd phone: 07 3004 7900 fax: 07 3846 1220 email: [EMAIL PROTECTED] http://www.toadshow.com.au -

Re: [Declude.Virus] AVG V6 much slower than FProt and McAfee

2004-02-25 Thread Adrian Hauri
Currently only the 16-bit version works with Declude, the 32-bit version will soon. 16-bit apps have a big performance hit because they run under NTVDM. I think it's not a 16Bit/32Bit issue. My F-Prot runs also in the 16bit Dos Version and is much faster than AVG. (I tested it Communigate Pro and

RE: [Declude.Virus] W32/Netsky.c@MM - new

2004-02-25 Thread Kaj Søndergaard Laursen
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 25. februar 2004 19:31 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] W32/[EMAIL PROTECTED] - new Looks like F-Prot is calling it W32/Bizex.A ... unless there's another one