Just noticed a couple files in my root directory:

DECLUDE.GP1
DECLUDE.GP2

The first file contains the following:

|�
(Error 5 at 41889c v1.55)
(attempt to read at 5a8010)
(0041889C 0012C87C (CCCCCCCC CCCCCCCC) C:\IMail\Declude.exe)
(0040EA37 0012C88C (00000000 00000000) C:\IMail\Declude.exe)
(0040B6CC 0012FF80 (00000002 005B0AA0) C:\IMail\Declude.exe)
(004247F7 0012FFC0 (00000000 00000000) C:\IMail\Declude.exe)
(77E8D326 0012FFF0 (00424743 00000000) C:\WINNT\system32\KERNEL32.dll)

Qaad80ee Testing whitelist #12595 0 .


The second file contains binary data. Within the binary data is a reference 
to the file C:\IMail\spool\Qaad80ee.SMD. That file no longer exists in the 
spool directory. The datestamp on the DECLUDE.GP1 and .GP2 files is 7/6 at 
4:31 am. Looking in the vir0706.log file at 4:31 shows this entry:

07/06/2002 04:31:23 Qaad80ee Scanned: Virus Free [MIME: 1 147]

I am running 1.55 with current F-Prot scanner and files, DOS only.

I know that's not a whole lot to go on. Any idea what caused the problem?


Second question: My decxxxx.log files are filled with this line. Nine 
copies of this line appear for every message processed.

07/06/2002 04:30:34  Warning, misconfiguration in 10; expecting action

Any clue what I should be looking for?

_______________________
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to