John, Attached is the file for your review - we ran declude for about 2 min. It almost crashed the iMail server.
Thanks, CM -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 11:14 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus In the virus.cfg file, near the top, there is a line like this: LOGLEVEL LOW Change that to LOGLEVEL DEBUG. Let it run for a bit and then change back. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Web Administrator > Sent: Tuesday, October 28, 2003 8:08 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] containing the Unknown Virus > > Thanks for your help John. How do we put the log into debug mode? > > Regards, > CM > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff > (Lists) > Sent: Tuesday, October 28, 2003 10:36 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] containing the Unknown Virus > > > Please put the log into debug mode, run some through, then zip the log > and send please. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Web Administrator > > Sent: Tuesday, October 28, 2003 6:38 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] containing the Unknown Virus > > > > My apologies, I copied the wrong file. The correct file is > > attached. > > > > Regards, > > CM > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of John > > Tolmachoff > > (Lists) > > Sent: Tuesday, October 28, 2003 9:06 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] containing the Unknown Virus > > > > > > Rerun the output file. You forgot the -diag. > > > > You must open a command prompt and change to the imail directory. > > > > CD C:\Imail > > Declude -diag >c:\declude.txt > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > > [EMAIL PROTECTED] On Behalf Of Web Administrator > > > Sent: Tuesday, October 28, 2003 5:24 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.Virus] containing the Unknown Virus > > > > > > Hello Scott, > > > > > > We made those changes to the cfg, and the same issue happens > > > again... > > > > > > -CM > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott > > > Perry > > > Sent: Tuesday, October 28, 2003 7:50 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.Virus] containing the Unknown Virus > > > > > > > > > > > > >Thanks for the help. I have included those files, plus the > > > >declude.log file. I look forward to hearing from you. > > > > > > The problem is here: > > > > > > SCANFILE D:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE > > > /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt > > > > > > This line should be changed to: > > > > > > SCANFILE D:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE > > > /DUMB > > > /REPORT=report.txt > > > > > > The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers > > > not to have /NOBOOT, as well). > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail > > > mailservers. Declude Virus: Catches known viruses and is the > > > leader in mailserver vulnerability detection. Find out what you've > > > been > > > missing: Ask about our free 30-day evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
vir1028.zip
Description: Zip compressed data
