Put the LOGLEVEL on DEBUG and capture a crash, send it to [EMAIL PROTECTED] looks like it could be a buffer overflow issue. Also if there is a declude.gp1 file in the c:\ send that as well.
Thanks David -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Friday, October 19, 2007 1:09 PM To: email@example.com Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Hello, our declude is crashing, no matter if I try 4.3.46 or 4.3.64. It looks like a "special offer" with about 1400 "To" Addresses. The Header looks not very strange: ------------ Received: from moutng.kundenserver.de [220.127.116.11] by xxxxxx-GmbH.de with ESMTP (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200 Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [18.104.22.168]) by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis) id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200 Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC; Fri, 19 Oct 2007 16:45:57 +0200 Return-Path: <[EMAIL PROTECTED]> Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200 Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates 22.214.171.124 as permitted sender) client-ip=126.96.36.199; [EMAIL PROTECTED]; helo=moutng.kundenserver.de; Return-Path: <[EMAIL PROTECTED]> Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200 Received-SPF: none (mxeu18: 188.8.131.52 is neither permitted nor denied by domain of europastar.com) client-ip=184.108.40.206; [EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org; Message-ID: <[EMAIL PROTECTED]> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0 Content-class: urn:content-classes:message Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----_=_NextPart_001_01C8122B.6A62C395" Subject: =?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?= =?utf-8?Q?angebot!?= Date: Fri, 19 Oct 2007 16:45:57 +0200 X-Mailer: Microsoft CDO for Exchange 2000 X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: =?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?= =?utf-8?Q?bot!?= Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA= From: "Bailly-Henguely, Jocelyne" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, And this repeated till line 1459. It's 164 KB in size, with "mid" nothing in the logfile. Eventlog says "stopped unexpectedly" :) ? Alex Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.