Further note: F-prot 3.12 cures the problem - this is
a Klez variant. And curiously enough, 3.12 is capable
of scanning Imail .SMD spool files directly and
detecting viruses. It apparently can unpack standard
mime .EML type of files.
FYI - One of the new viruses that came out in the
FYI - I'm blocking the 'Outlook Blank Folding
Vulnerability' potential virus. Today, one of our
customers' E-mail using Incredimail 2001 was blocked. I
don't know if they have a newer version, but I'm
checking with the vendor. This is the first time I've
noticed a non-spam message
I'm getting a boatload of xmascottage.shs , christmas.shs types of files.
These are banned extensions, but not detected by F-prot. I'm very suspicious
of these - any other experiences?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came
Include this link to the (ir)responsible postmasters:
http://www.attrition.org/security/rant/av-spammers.html
Here's another, do you want these off list?
I have tried to e-mail this guy twice already:
Subject: Your mail server sent us a virus
The Declude Virus software on our mail
We're seeing the same thing David did - random error 5's on the newest F-prot. I
backed off to the previous version. Is there a way to rescan the error 5's using
Declude from the command line if I create a batch file?
---
[This E-mail was scanned for viruses by Declude Virus
Can Declude be run from a folder other than the main IMail spool folder? - in which
case a good message would not be moved to a virus subfolder.
Alternatively, can I temporarily stop the queue manager to run the scan?
Thanks,
You could try copying the files back to the spool directory,
