PROTECTED]
On Behalf Of JT
Sent: Thursday, January 05, 2006 12:49 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Sober.X Variant
Andrew,
I suspected that but we'll see my results. I did what John suggested and
I also have ClamAV and F-Prot running simultaneously. Doing
Is this what you are seeing?
http://www.sophos.com/virusinfo/analyses/w32feebsa.html
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of JT
Sent: Thursday, January 05, 2006 6:44 AM
To: declude.virus@declude.com
Subject:
What I am experiencing is that the server lets the virus go through the
system. It scans and result is clean, the end user gets the email and
their Symantec Enterprise snags it and tags it as [EMAIL PROTECTED]
On Thu, 2006-01-05 at 08:25 -0800, John T (Lists) wrote:
Is this what you are seeing?
That means you are not blocking banned extensions within zip files?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of JT
Sent: Thursday, January 05, 2006 8:45 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus
Virus pro only, IIRC.
-Dan Horne
John T (Lists) wrote on Thursday, January 05, 2006 12:31 PM:
Into the Virus.cfg file:
BANEZIPEXTS ON
BANZIPEXTSON
John T
eServices For You
CONFIDENTIALITY NOTICE:
This email message,
Sent: Thursday, January 05, 2006 9:20 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Sober.X Variant
John,
What do I need to do to block banned extensions within zip files
Thanks,
JT
On Thu, 2006-01-05 at 09:14 -0800, John T (Lists) wrote:
That means you
: Thursday, January 05, 2006 10:39 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Sober.X Variant
John,
Thanks for the help!
Regards,
JT
On Thu, 2006-01-05 at 09:31 -0800, John T (Lists) wrote:
Into the Virus.cfg file:
BANEZIPEXTS ON
BANZIPEXTS ON
John T
.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of JT
Sent: Thursday, January 05, 2006 10:39 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Sober.X Variant
John,
Thanks for the help!
Regards,
JT
Are you using the correct switches for F-Prot?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of JT
Sent: Thursday, January 05, 2006 12:49 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Sober.X Variant