Are you running the real time scanner on the spool folder. Disable the real 
time scanner if it is running.



Kevin Bilbee

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Mario Antonio
> Sent: Tuesday, October 31, 2006 11:38 AM
> To: declude.virus@declude.com
> Subject: Re: [Declude.Virus] Hijack Question
> 
> David,
> 
> I am running f-prot  3.16f
> Take a look at my configs
> 
> SCANFILE  C:\f-prot_windows\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5
> /PACKED /NOBOOT /DUMB /REPORT=report.txt
> VIRUSCODE       3
> VIRUSCODE 6
> VIRUSCODE 8
> REPORT          Infection:
> 
> 
> Any suggestions?
> 
> 
> Regards
> 
> Mario Antonio
> 
> 
> ----- Original Message -----
> From: "David Barker" <[EMAIL PROTECTED]>
> To: <declude.virus@declude.com>
> Sent: Tuesday, October 31, 2006 1:58 PM
> Subject: RE: [Declude.Virus] Hijack Question
> 
> 
> > There should not be orphan files I would think you are running some
> type
> of
> > virus scanner that is removing the D*.smd files from the \work
> directory.
> >
> > David B
> > www.declude.com
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Mario
> > Antonio
> > Sent: Tuesday, October 31, 2006 11:50 AM
> > To: declude.virus@declude.com
> > Subject: Re: [Declude.Virus] Hijack Question
> >
> > David,
> >
> > One more question,
> >
> > I am seeing that some Q files remain in the spool\proc\work folder,
> is
> this
> > normal?
> > why?
> > Should I clean them manually? Where are the corresponding D files?
> >
> > Regards
> >
> > Mario Antonio
> >
> >
> >
> > ----- Original Message -----
> > From: "David Barker" <[EMAIL PROTECTED]>
> > To: <declude.virus@declude.com>
> > Sent: Tuesday, October 31, 2006 10:18 AM
> > Subject: RE: [Declude.Virus] Hijack Question
> >
> >
> > > Stop/Start the decludeproc will reset the hijack counter.
> > >
> > > David B
> > > www.declude.com
> > >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Mario
> > > Antonio
> > > Sent: Tuesday, October 31, 2006 9:42 AM
> > > To: declude.virus@declude.com
> > > Subject: [Declude.Virus] Hijack Question
> > >
> > > Does anyone know if you have to restart the declude process after
> you
> have
> > > moved back files from the HOLD2 folder into the spool  ---Declude
> > > 3.0.5/Imail 8.22?
> > >
> > > In the Declude 2.X you had to close the foreground screen/console
> (which
> > > restarts Hijack) in order to clean all the IP addresses that have
> been
> > > banned.
> > >
> > >
> > > Regards
> > >
> > > Mario Antonio
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe,
> > just
> > > send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus".    The archives can be found
> > > at http://www.mail-archive.com.
> > >
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.Virus mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus".    The archives can be found
> > > at http://www.mail-archive.com.
> > >
> > >
> > >
> > >
> > >
> >
> >
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".    The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".    The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> >
> >
> 
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.






---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to