RE: [Declude.Virus] How do i do this
Ok and that will be released ? It's now available as an interim release (1.76i15) at http://www.declude.com/release/176i/declude.exe . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail server Memory Dump.
IM running 1.65 Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 1:05 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Declude.Virus] IMail server Memory Dump. Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM not sure. How do I find out. From the manual, you can type \IMail\Declude -diag from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Ipswitch removed link til declude and other 3. party
Last time i was on the web pages for Imail there where a page of third party tools Loganalyzeres and declude and so on, but now I only find 3 links there and all of them looks like close companies to Ipswich. Is this a new policy or have I just blind ? Anyone have the link for the virusloganalyzer ? Benny --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Zip vulnerability
Does Declude recognize the zip vulnerability where a zip file contains 5 other zip files each of which contain a further 5 zip files which ALL contain 400MB files? So about 10GB of zipped files that zips down to 5kb I really don't want to test it on my live server but I have such a file. Craig. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Zip vulnerability
I think it depends on your virus scanner, but I believe that most virus scanners will now detect the zip of death. Bill - Original Message - From: Craig Gittens [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 28, 2003 11:52 AM Subject: [Declude.Virus] Zip vulnerability Does Declude recognize the zip vulnerability where a zip file contains 5 other zip files each of which contain a further 5 zip files which ALL contain 400MB files? So about 10GB of zipped files that zips down to 5kb I really don't want to test it on my live server but I have such a file. Craig. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Hi Scott, We have re-installed F-Prot and we continue to have the same issue. We execute declude.exe and restart SMTP service - once we do that we get a ton of unknown virus alerts and in the system process there is about 20 declude.exe running. What could be causing this? Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:39 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus We are getting this issue again, but now my customers receive you have a virus notification the Unknown virus. That will occur if the virus scanner reports a virus, but does not report the virus name in the report.txt file as Declude expects it to appear. They get one a sec. I removed the declude.exe from the SMTP settings on imail - for now. I also noticed that I have 20 to 30 declude.exe process running at one time. It was so bad that it crashed the SMTP server. The log files show time out errors. I would re-install F-Prot. If something is seriously wrong, F-Prot may stay in memory until Declude Virus times it out (if it is waiting for user input, for example). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Not sure if Scott is still around, so if you want, do the following: Go to command prompt: Change to the Imail directory. Type exactly without the quotes, Declude -daig c:\declude.txt Send that file along with your virus.cfg file zipped to Scott, the list or me if you like, and it will be reviewed to see if there is something there. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 3:54 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hi Scott, We have re-installed F-Prot and we continue to have the same issue. We execute declude.exe and restart SMTP service - once we do that we get a ton of unknown virus alerts and in the system process there is about 20 declude.exe running. What could be causing this? Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:39 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus We are getting this issue again, but now my customers receive you have a virus notification the Unknown virus. That will occur if the virus scanner reports a virus, but does not report the virus name in the report.txt file as Declude expects it to appear. They get one a sec. I removed the declude.exe from the SMTP settings on imail - for now. I also noticed that I have 20 to 30 declude.exe process running at one time. It was so bad that it crashed the SMTP server. The log files show time out errors. I would re-install F-Prot. If something is seriously wrong, F-Prot may stay in memory until Declude Virus times it out (if it is waiting for user input, for example). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
We have re-installed F-Prot and we continue to have the same issue. We execute declude.exe and restart SMTP service - once we do that we get a ton of unknown virus alerts and in the system process there is about 20 declude.exe running. What could be causing this? What does the Declude Virus log file show? What are your SCANFILE, VIRUSCODE and REPORT lines from your \IMail\Declude\virus.cfg file? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Is this true for the DOS version of f-prot too? ~Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 6:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Is this true for the DOS version of f-prot too? F-Prot.exe (the 16-bit program which comes with both the DOS and Windows version of F-Prot) requires the /NOFLOPPY and /NOBOOT switches. fpcmd.exe (the 32-bit program which just comes with the Windows version of F-Prot) should not use /NOFLOPPY or /NOBOOT. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
Scott, Attached is the log file from today for your review... Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 8:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus We made those changes to the cfg, and the same issue happens again... That means that you had more than one problem before. What exactly does the SCANFILE line look like now? What warnings/errors appear in the \IMail\spool\vir.log file? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. vir1028.zip Description: Zip compressed data
RE: [Declude.Virus] containing the Unknown Virus
Also, add VIRUSCODE 8 to the virus.cfg file please. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 5:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
My apologies, I copied the wrong file. The correct file is attached. Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Rerun the output file. You forgot the -diag. You must open a command prompt and change to the imail directory. CD C:\Imail Declude -diag c:\declude.txt John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 5:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. Declude 1.75 (C) Copyright 2000-2003 Computerized Horizons. All Rights Reserved. Diagnostics ON (Declude v1.75). Declude JunkMail: Not installed (no D:\IMAIL\Declude\global.CFG file). Declude Virus: Config file found (D:\IMAIL\Declude\Virus.CFG). Declude Hijack:Not installed (no D:\IMAIL\Declude\Hijack.CFG file). Declude Confirm: Not installed (no D:\IMAIL\Declude\Confirm.CFG file). Already installed -- not changing smtp32.exe entry unless Declude run manually with no arguments. IMail reports Official Host Name as: extremesites.com. ERROR: IMail's SendName registry entry is NOT pointing to Declude; Declude is NOT installed. It is set to: D:\IMAIL\SMTP32. Declude JunkMail Status: NOT REGISTERED: No activation code. Declude Virus Status:Pro Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics.
RE: [Declude.Virus] containing the Unknown Virus
Please put the log into debug mode, run some through, then zip the log and send please. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 6:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus My apologies, I copied the wrong file. The correct file is attached. Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Rerun the output file. You forgot the -diag. You must open a command prompt and change to the imail directory. CD C:\Imail Declude -diag c:\declude.txt John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 5:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] containing the Unknown Virus
In the virus.cfg file, near the top, there is a line like this: LOGLEVEL LOW Change that to LOGLEVEL DEBUG. Let it run for a bit and then change back. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 8:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for your help John. How do we put the log into debug mode? Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 10:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Please put the log into debug mode, run some through, then zip the log and send please. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 6:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus My apologies, I copied the wrong file. The correct file is attached. Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Rerun the output file. You forgot the -diag. You must open a command prompt and change to the imail directory. CD C:\Imail Declude -diag c:\declude.txt John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 5:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing
RE: [Declude.Virus] containing the Unknown Virus
John, Attached is the file for your review - we ran declude for about 2 min. It almost crashed the iMail server. Thanks, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 11:14 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus In the virus.cfg file, near the top, there is a line like this: LOGLEVEL LOW Change that to LOGLEVEL DEBUG. Let it run for a bit and then change back. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 8:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for your help John. How do we put the log into debug mode? Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 10:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Please put the log into debug mode, run some through, then zip the log and send please. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 6:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus My apologies, I copied the wrong file. The correct file is attached. Regards, CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Rerun the output file. You forgot the -diag. You must open a command prompt and change to the imail directory. CD C:\Imail Declude -diag c:\declude.txt John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Web Administrator Sent: Tuesday, October 28, 2003 5:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Hello Scott, We made those changes to the cfg, and the same issue happens again... -CM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 7:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] containing the Unknown Virus Thanks for the help. I have included those files, plus the declude.log file. I look forward to hearing from you. The problem is here: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt This line should be changed to: SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /DUMB /REPORT=report.txt The /NOFLOPPY options caused fpcmd.exe to choke (and it prefers not to have /NOBOOT, as well). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by
RE: [Declude.Virus] containing the Unknown Virus
10/28/2003 23:30:36 Q5532251336c 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q553232c3244 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q5532d6d3174 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q5533f3f31c4 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q55323a93378 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q5531929336c 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. 10/28/2003 23:30:36 Q55323b93328 1 [1 of 2 not deleted] files were deleted. Use ONACCESS ON if you use an external (on access) virus scanner. Do you have any other AV scanner with Real-Time File Protection turned on? Do you have F-Prot Real Time scanner on? John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] IMail server Memory Dump.
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) I'm getting a problem every 6 -7 hours. I'm using the latest version of I mail on Windows server 2000 with all the latest MS patches. Declude version IM not sure. How do I find out. Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] IMail server Memory Dump.
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM not sure. How do I find out. From the manual, you can type \IMail\Declude -diag from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
