: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
I am not aware of any exploits for 8.15 HF2 and your executable is
the same as mine. I'll have to take back my suggestion that you were
hacked. I can't explain the issues with orphaned accounts on your
system, and considering what
@declude.com
Sent: Tuesday, December 13, 2005 1:39 AM
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Brian,
I believe that IMail 8.15 and higher are protected from the exploit that
you were hit with, and those versions are about a year and a half old
now. IMail is certainly
.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, December 12, 2005 11:40 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Brian,
I believe that IMail 8.15 and higher are protected
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Brian,
I believe that IMail 8.15 and higher are protected from the exploit that
you were hit with, and those versions are about a year and a half old now.
IMail is certainly targeted on occasion by exploits and spammers
:39 AM
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Brian,
I believe that IMail 8.15 and higher are protected from the exploit
that you were hit with, and those versions are about a year and a
half old now. IMail is certainly targeted on occasion by exploits
AM
Subject: RE: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Brian,
Did you have the SMTPWIN entry in your registry file with part of the From
address that's used in your recip.eml file?
Mike
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
\domain.com\Users\postmaster\SMTPWIN
SUCCESS 20,20,524,350
PV
===
- Original Message -
From: Mike Wiegers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Sunday, December 11, 2005 2:49 AM
Subject: RE: [Declude.Virus] Stranger... about imail1
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Crejob.com
Sent: Friday, December 09, 2005 9:33 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Maybe, but you check the maillist history, quite a few servers have the
same
]
To: Declude.Virus@declude.com
Sent: Saturday, December 10, 2005 1:49 AM
Subject: RE: [Declude.Virus] Stranger... about imail1.exe be hijacked.
What I think it might be is a combination of several things and here are
some of the common things that I have with information gathered on the
different lists:
Seems
Virus Pro 1.82
F-Prot
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of marc
Sent: Saturday, December 10, 2005 7:29 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Mike, thx for fix this problem
@declude.com
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Hi, Mike
You are really helpful!
I've incerted the SKIPIFVIRUSNAMEHAS Sober 10 hours
before, and the problem seems disapear!
I'll keep monitor it and let you know the result. Once again,
thank you !
Regards
Brian
]
Sent: Saturday, December 10, 2005 8:33 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Mike, thx for fix this problem with your suggestion adding the
SKIPIFVIRUSNAMEHAS Sober in the recip.eml file, this really helps!
We had the same
:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Crejob.com
Sent: Thursday, December 08, 2005
9:57 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus]
Stranger...
Does any body find the answer of this problem?
After 1.5 years, this problem still remain.
and IPSWITCH
it bypass the
declude.
- Original Message -
From:
John T (Lists)
To: Declude.Virus@declude.com
Sent: Friday, December 09, 2005 4:15
PM
Subject: RE: [Declude.Virus]
Stranger...
I do not think this
is either an Imail or Declude issue, rather a server
?
Thanks,
Mike
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Crejob.com
Sent: Friday, December 09, 2005 9:33 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Stranger... about imail1.exe be hijacked.
Maybe, but you check the maillist
Subject: Re: [Declude.Virus]
Stranger...
i know imail1 is a command line
mailer
but how do i find what i causing the imail 1
window to be open and filed with all these adresses ?
see attached gif
- Original Message -
From:
Darin Cox
can the issue be due to declude ?
It shouldn't be possible, because:
Does declude use imail1 for its virus notifications ?
Even though Declude Virus does use IMail1.exe for its notifications, it
never uses Bcc: headers, which were appearing in the ones that you saw
(and, the IMail1.exe process
Never seen anything like it, but having an IMail window come up as a
result of a virus would be rather odd I would think. I would lean in
the direction of this being a software state that a reboot might fix,
or possibly your server is being exploited. There was an LDAP
vulnerability in IMail
LDAPservice is not running.
Any other idea?
- Original Message -
From:
Matt
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 8:07 PM
Subject: Re: [Declude.Virus]
Stranger...
Never seen anything like it, but having an IMail window come up
as a result
LDAPservice is not running.
Any other idea?
- Original Message -
From:
Matt
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 8:07 PM
Subject: Re: [Declude.Virus]
Stranger...
Never seen anything like it, but having an IMail window come up
as a result
LDAPservice is not running.
Any other idea?
- Original Message -
From:
Matt
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 8:07 PM
Subject: Re: [Declude.Virus]
Stranger...
Never seen anything like it, but having an IMail window come up
as a result
Title: Strange...
Does this shed any light?
http://support.ipswitch.com/kb/IM-19980119-DD10.htm
Darin.
- Original Message -
From: Serge
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 3:55 PM
Subject: [Declude.Virus] Stranger...
hi all
urgent help needed
I have imail1 client
PM
Subject: Re: [Declude.Virus]
Stranger...
Does this shed any light?
http://support.ipswitch.com/kb/IM-19980119-DD10.htm
Darin.
- Original Message -
From: Serge
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 3:55 PM
Subject: [Declude.Virus] Stranger
PROTECTED]
Sent:
Monday, June 07, 2004 10:21 PM
Subject:
Re: [Declude.Virus] Stranger...
Does this shed any light?
http://support.ipswitch.com/kb/IM-19980119-DD10.htm
Darin.
-
Original Message -
From:
Serge
To: [EMAIL PROTECTED
settings.
Darin.
- Original Message -
From: serge
To: [EMAIL PROTECTED]
Sent: Monday, June 07, 2004 7:46 PM
Subject: Re: [Declude.Virus] Stranger...
i know imail1 is a command line mailer
but how do i find what i causing the imail 1 window
to be open and filed with all these adresses
Title: Strange...
is imail1used by IMAIL?
i mean, can we delete or rename imail1
?
- Original Message -
From:
Darin Cox
To: [EMAIL PROTECTED]
Sent: Tuesday, June 08, 2004 12:24
AM
Subject: Re: [Declude.Virus]
Stranger...
Don't know...never seen
26 matches
Mail list logo
