I believe both messages came from the same person and I could add a filter to capture subsequent attempts and probably have a copy for you in a week or so unless someone else can come up with one sooner.

BTW, I am blocking EXE files, so somehow this appears to be bypassing that unless Declude is unzipping whatever is being sent and then leaving the file behind. Declude of course is calling the file 1_1.exe.binhex and not just 1_1.exe like the actual file that is being left behind.

Matt



R. Scott Perry wrote:


I've seen this twice now with the same exact circumstances so I though I would report it. What's happening is a virus directory is being left in the spool when Declude and/or the scanners are encountering a file called 1_1.exe in binhex format.


Thanks for reporting this -- although we cannot reproduce the problem here, we are looking into it.

If anyone finds this happening to an E-mail that is held for some reason (or still in an .mbx file when it is discovered), we can probably reproduce the problem, which could speed up a resolution to the problem.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.



-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================


--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to