Noticed a few things: 1. many .vir directories left behind every morning. 2. many .sm$ files left behind. 3. decludeproc restarting several times, mostly in the morning. I think this is why the files are left behind?
declude logfile gives no clue as far as I can tell.
Event Type: Information
Event Source: Decludeproc
Event Category: None
Event ID: 105
Date: 9/16/2007
Time: 8:02:01 AM
User: N/A
Computer: MAIL
Description:
The service was started.
Any suggestions where to start?
Declude 4.3.46 Diagnostics
Compilation Platform: IMail
Copyright (c) 2000-2005 Declude, Inc.
Host Name xx
Daisy Chain smtp32.exe
DNS Server xx
Product Details
JunkMail Pro
EVA Pro
Hijack Pro
Tests Defined 116
I### ADDED
DSBL IP4R
SPAMCOP IP4R
AHBL IP4R
DroneBL IP4R
NJABLPROXIES IP4R
FABELSOURCES IP4R
FIVETENSRC IP4R
FIVETEN-BULK IP4R
FIVETEN-MULTISTAGE IP4R
FIVETEN-SPAMSUPPORT IP4R
FIVETEN-MISC IP4R
FIVETEN-FREE IP4R
INTERSIL IP4R
UCEB IP4R
SORBS-HTTP IP4R
SORBS-SOCKS IP4R
SORBS-MISC IP4R
SORBS-SMTP IP4R
SORBS-ZOMBIE IP4R
SORBS-DUL IP4R
SORBS-BADCONF RHSBL
SORBS-NOMAIL RHSBL
CSMA-SBL IP4R
JAMMDNSBL IP4R
MXRATE-BLOCK IP4R
MXRATE-SUSPICIOUS IP4R
MAILPOLICE-BULK RHSBL
MAILPOLICE-PORN RHSBL
MAILPOLICE-HELO DNSBL
MAILPOLICE-REVDNS DNSBL
SECURITYSAGE RHSBL
AHBL-RHSBL RHSBL
BONDEDSENDER IP4R
ZEN IP4R
SPAMHAUS IP4R
XBL IP4R
NJABL IP4R
PBL IP4R
DSN RHSBL
NOABUSE RHSBL
NOPOSTMASTER RHSBL
SPAMDOMAINS SPAMDOMAINS
SUBJECTSPACES7 SUBJECTSPACES
SUBJECTSPACES10 SUBJECTSPACES
COMMENTS20 COMMENTS
COMMENTS40 COMMENTS
COMMENTS60 COMMENTS
COMMENTS80 COMMENTS
COMMENTS100 COMMENTS
COMMENTS120 COMMENTS
NOLEGITCONTENT NOLEGITCONTENT
BADHEADERS BADHEADERS
BASE64 BASE64
HELOBOGUS HELOVALID
MAILFROM ENVFROM
IPNOTINMX IPNOTINMX
PERCENT PERCENT
REVDNS REVDNSEXISTS
ROUTING SPAMROUTING
SPAMHEADERS SPAMHEADERS
CMDSPACE CMDSPACE
DYNHELO DYNHELO
SPFPASS SPF
SPFUNKNOWN SPF
SPFFAIL SPF
AUTOWHITE1 EXTERNAL
AUTOWHITE2 EXTERNAL
AUTOWHITE3 EXTERNAL
AUTOWHITE4 EXTERNAL
HELOFILTER FILTER
COUNTRYFILTER FILTER
GIBBERISH FILTER
GIBBERISHSUB FILTER
SPAMGATE FILTER
SPAMGATETRACKING FILTER
SPAMGATECH FILTER
SPAM-PDF FILTER
SPAM-PDF2 FILTER
ECARD FILTER
OBFUSCATION FILTER
REVDNSBLACKLIST FILTER
BADWORDFILTER FILTER
BLOCKEDIP FROMFILE
BADEMAIL FROMFILE
SPAMCHK EXTERNAL
SNIFFERGREY EXTERNAL
SNIFFERGETRICH EXTERNAL
SNIFFEROBFUS EXTERNAL
SNIFFERPHARM EXTERNAL
SNIFFERDEBT EXTERNAL
SNIFFERPORN EXTERNAL
SNIFFERTHEFT EXTERNAL
SNIFFERSCAM EXTERNAL
SNIFFERINSURAN EXTERNAL
SNIFFEREXP EXTERNAL
SNIFFERCASINO EXTERNAL
SNIFFERINK EXTERNAL
SNIFFERMALWARE EXTERNAL
SNIFFERSPAMWAR EXTERNAL
SNIFFERAV EXTERNAL
SNIFFERTRAVEL EXTERNAL
SNIFFER EXTERNAL
WEIGHT-100 WEIGHT
WEIGHT-50 WEIGHT
WEIGHT-25 WEIGHT
WEIGHT0 WEIGHT
WEIGHT75 WEIGHT
WEIGHT100 WEIGHT
WEIGHT125 WEIGHT
WEIGHT150 WEIGHT
WEIGHT200 WEIGHT
WEIGHT250 WEIGHT
WEIGHT300 WEIGHT
WEIGHT350 WEIGHT
CATCHALLMAILS CATCHALLMAILS
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
