[Declude.JunkMail] Unknown virus

2002-11-19 Thread Heimir Eidskrem



Customer is getting virus notifications but the 
virus is listed as unknown.

Is this a known issue and how do I turn of 
notification for unknown virus.

He is clean.

H.


Please, DO NOT respond to this e-mail. This is an automated e-mail 
messagesent to alert you that you attempted to send a virus infected 
e-mailmessage.Fortunately, no harm is done. i360 Inc.'s advanced virus 
detection softwaredetected the virus, and the e-mail has been quarantined to 
prevent furtherdamage. This means that your recipient received a message 
similar to thisinstead of the virus-infected e-mail. We recommend that you 
check yoursystemfor viruses before communicating further by using your 
computer.Our software reported the following about the infected 
e-mail:The e-mail was sent to: [EMAIL PROTECTED]The e-mail 
subject: Are the instructions andE-mail contained this virus: Unknown 
VirusThe virus was located in this file: Unknown FileIf the 
recipient's address does not appear above,it is because of the nature of 
certain viruses,which corrupt such information.To find out more 
about the virus you e-mailed, click to www.sarc.com.To view virus related 
statistics, click towww.securitystats.com/virusstats.asp.


Re: [Declude.JunkMail] Unknown virus

2002-11-19 Thread R. Scott Perry


Customer is getting virus notifications but the virus is listed as unknown.


Hmm... that doesn't sound like a Declude JunkMail issue.  :)


Is this a known issue and how do I turn of notification for unknown virus.


Unknown Virus appears when the virus scanner can't report to Declude 
Virus what the name of the virus is.  If this happens to all E-mail, either 
your virus scanner doesn't support reporting the virus names properly, or 
you don't have your AV program set correctly.

If it happens only on some E-mail, the virus scanner doesn't know the name 
of the virus -- in which case, most like it has detected a suspicious 
file.  If you use F-Prot, you can remove the VIRUSCODE 8 line to prevent 
it from detecting such files.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Unknown virus

2002-11-19 Thread Patrick Childers
Customer is getting virus notifications but the virus is listed as unknown.
Is this a known issue and how do I turn of notification for unknown virus.
He is clean.

H.

This question really belongs on the declude.virus list. :-)

From the Declude Virus Manual:

Declude Virus (v1.53 and higher) can be set up not to send out E-mail
notifications for specific viruses. This is useful for viruses that forge
the return address (in which case a You have a virus notification would
get sent to someone without a virus). To prevent a notification from getting
sent out, you can add a line SKIPIFVIRUSNAMEHAS Virusname to the beginning
(before the first blank line) of any of the \IMail\Declude\*.eml files
(typically just the sender.eml and otherpostmaster.eml files). Virusname
should be replaced with a string that always appears in the name of the
virus and any variants; for example SKIPIFVIRUSNAMEHAS Klez. Note that
there can only be one space (or tab) between SKIPIFVIRUSNAMEHAS and the
virus name. To prevent the notifications from being sent for multiple
viruses, you need to have a SKIPIFVIRUSNAMEHAS line for each virus.

If you are referring to vunerabilities see the link below and follow the
thread.
http://www.mail-archive.com/declude.virus@declude.com/msg04005.html


-Patrick



---
[This E-mail scanned for viruses by Declude/McAfee]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Unknown virus

2002-11-19 Thread John Tolmachoff
Can you post a virus log snippet?

It is possible an error was returned by the virus scanner. The logs will
show this.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Heimir Eidskrem
Sent: Tuesday, November 19, 2002 9:21 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Unknown virus

Customer is getting virus notifications but the virus is listed as unknown.
 
Is this a known issue and how do I turn of notification for unknown virus.
 
He is clean.
 
H.
 
 
Please, DO NOT respond to this e-mail. This is an automated e-mail message
sent to alert you that you attempted to send a virus infected e-mail
message.
Fortunately, no harm is done. i360 Inc.'s advanced virus detection software
detected the virus, and the e-mail has been quarantined to prevent further
damage. This means that your recipient received a message similar to this
instead of the virus-infected e-mail. We recommend that you check your
system
for viruses before communicating further by using your computer.

Our software reported the following about the infected e-mail:

The e-mail was sent to: [EMAIL PROTECTED]
The e-mail subject: Are the instructions and
E-mail contained this virus: Unknown Virus
The virus was located in this file: Unknown File

If the recipient's address does not appear above,
it is because of the nature of certain viruses,
which corrupt such information.

To find out more about the virus you e-mailed, click to www.sarc.com.
To view virus related statistics, click to
www.securitystats.com/virusstats.asp.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.