I also notice that i am catching the yaha virus here
01/02/2003 23:15:17 Q0e54295d0102fff4 File(s) are INFECTED [3]
01/02/2003 23:15:17 Q0e54295d0102fff4 Scanned: CONTAINS A VIRUS [MIME: 2
29989]
but at 8:06 pm last night it also came through as the logs show nothing
01/02/2003 19:48:13 Qddcc231201026f74 Scanned: Virus Free
01/02/2003 19:49:29 Qde18231d01029892 Scanned: Virus Free [MIME: 1 6232]
01/02/2003 19:58:19 Qe02a23650102add8 Scanned: Virus Free [MIME: 1 145]
01/02/2003 20:02:14 Qe11523850102445d Scanned: Virus Free [MIME: 1 4623]
01/02/2003 20:05:12 Qe1c7239d0102fc97 Scanned: Virus Free
01/02/2003 20:12:34 Qe38023dd0102b461 Scanned: Virus Free [MIME: 1 2125]
01/02/2003 20:13:12 Qe3a723e101024cb9 Scanned: Virus Free [MIME: 1 1396]
01/02/2003 20:15:35 Qe43623f601027c3b Scanned: Virus Free [MIME: 1 2969]
01/02/2003 20:29:43 Qe787244101026ecf Scanned: Virus Free [MIME: 2 9379]
----- Original Message -----
From: "Matthew Lohr" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 03, 2003 8:36 AM
Subject: Re: [Declude.Virus] Klez?
> i just put the latest version of declude in v1.65 like 5 minutes ago. I
> believe i had 1.62 running before that. Other viruses are still being
> caught. This started on the 28th of last month
> ----- Original Message -----
> From: "R. Scott Perry" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, January 03, 2003 8:25 AM
> Subject: Re: [Declude.Virus] Klez?
>
>
> >
> > >I think my users are getting bombarded with klez. The email is as
> follows
> > >
> > >Hi,
> > >I just came across this funny screensaver..
> > >sending it to u.. hope u like it..
> > >check out and die laughing.. :)
> >
> > Actually, I believe that is Yaha.
> >
> > >Klez.H is the most common world-wide spreading worm.It's very dangerous
> by
> > >corrupting your files.
> >
> > This one is likely Klez.
> >
> > >I have the latest virus signatures and this was being blocked before.
> Why
> > >now?
> >
> > What do your log files say? Does the eicar.com file get caught? What
> > version of Declude Virus are you running ("\IMail\Declude -diag",
> *exactly*
> > like that, from a command prompt will tell you)?
> > -Scott
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". The archives can be found
> > at http://www.mail-archive.com.
> >
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
