Might I suggest that this is good information that can be placed in the AV & JM List Subscribe Welcome messages from the server. Also, information on general commands like how to go Digest and Standard mode would also be helpful. All of us should be familiar with Imail but some are new users and even I don't want to dig through the manual PDF to try to find that info. Just my 2/100 of a dollar.
John Olden - Systems Administrator Champaign Park District ----- Original Message ----- From: "Markus Gufler" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, March 04, 2004 5:27 PM Subject: RE: [Declude.Virus] Error in virus scanner with winmail.dat attachment Excuse if this answer sounds a litle bit offending. Please please please please please please first read the archives before posting something that was allready asked again again again and again on this list! On weeks like the last one there is a lot of email traffic and it's also a very time consuming task to read all this messages only to be sure to not miss anything. So if you don't read all of this messages because you've subscribbed shortly or whatever else please go to the mail archive (see link in the footer of any mail in this list) and search what you're asking for. I know Scott is very good in answering questions and supporting his customers, but in my eyes this should not result in repeated questions only because someone knows that asking again is much easier the searching in the archives. So please go to http://www.mail-archive.com/declude.virus%40declude.com/ And search for "winmail.dat" or "3.14c" and TATAAA!!! There are several messages about this issue. Same thing for all this questions about encrypted zip files going trough. (this is nothing against you, Mike!) In my opinion it's very easy to use the eicar test messages Scott provided on his website. And it should also possible for everyone to create his own 4 ZIP files that are ZIP+TXT ZIP+EICAR eZIP+TXT and eZIP+EICAR. Now if you're not sure what happens on your mail server, try to send this four files trough your server, open the logfiles and see what happens. Instead of asking 50 times the same question and not being sure if you're able to protect your users mailboxes, simply try, check and know, as many other admins on this list do actually. Thank you to help keep this list clean and usable! Markus > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Thursday, March 04, 2004 10:40 PM > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] Error in virus scanner with > winmail.dat attachment > > Scott, > > I am currently having a problem with Declude and FProt virus scanner. > > I am running Declude v1.78i9 and FProt Version 3.14c > > Here is one sample from the vir0304.log: > > 03/04/2004 10:49:09 Q7a250c37008a2513 MIME file: winmail.dat > [base64; Length=2476 Checksum=167471] > 03/04/2004 10:49:20 Q7a250c37008a2513 Could not find parse > string Infection: in report.txt > 03/04/2004 10:49:20 Q7a250c37008a2513 Error 5 in virus scanner 1. > 03/04/2004 10:49:20 Q7a250c37008a2513 Scanned: Error in virus > scanner. [MIME: 2 4005] > > I have about 20 sets just like this. All with winmail.dat > but with different sizes. > > Every email message that has been received today with > winmail.dat attachment has the same error. > > Should I be concerned about this error? > > Thanks, > Mike Kruidhof > [EMAIL PROTECTED] > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
