RE: [Declude.Virus] Passing a bogus zip.
I believe the spaces in the BANNAME was fixed in 179i6 and higher. I have successfully blocked Deleted Attachment I'm running 1.79i7 now and messages containing an attachment like Norton AntiVirus deleted1.txt still pass our virus filter. ? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] TOT TCP/IP Protocol driver service
I use the BGINFO on all the servers I support. It is absolutely great especially since I terminal server into many at a time and it very clearly tells me what server I am on. Also tells the less sophisticated network admins which server they are on when using the KVM switch. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, May 21, 2004 1:39 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service I also have the 2002 Admin pack. Back then we paid $999 for it. I have saved several shared servers with it more than covering the $999 but now it is closer to $5000 I believe. It may be worth it as well. All their products are great. Go to the freeware site sysinternals.com and get all their tools. Even the simple Bginfo screen background is the handiest utility. It builds a very simply BMP that has all your system info and becoms the desktop background. Nothing fancy just the info. You can run it on boot up or schedule it to update every few hours if needed. Great on desktops and servers. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Thursday, May 20, 2004 12:14 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service ERD commander is an awesome tool, helps change service/device startup values, registry, connect through the network to other machines, chkdsk, etc etc... Might take a look at that, helps me a TON. I was going to recommend that, as I have the 2002 version, but their new licensing terms has priced the newer version completely out of reach for the average small business. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] TOT TCP/IP Protocol driver service
I don't think I'd ever need to install software while in safe mode. And I'd only need to uninstall in safe mode if I was desperate. If things went wrong by uninstalling in safe mode then I'd be no worse off because I wouldn't really know which keys/files to look at replacing if Norton hadn't of uninstalled. It would probably have been a rebuild anyway. Glad it worked for you. However, word of caution. I would change that registry back. The reason Windows Installer is not usable in Safe Mode is some programs being installed or uninstalled in safe mode can cause problems. John Tolmachoff Engineer/Consultant/Owner eServices For You Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)8712360301 Web: www.uksubnet.net Fax: +44(0)8712360300 Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] TOT TCP/IP Protocol driver service
The great feature of this product is that you can specifically add it to all users or specific users desktops. So you can see in within TS. Yes it is great for that exact reason. We used to create custom backgrounds when we sold servers to ISP clients so they could immediately see where they are. Saved us from doing that work G... DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, May 21, 2004 8:37 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service I use the BGINFO on all the servers I support. It is absolutely great especially since I terminal server into many at a time and it very clearly tells me what server I am on. Also tells the less sophisticated network admins which server they are on when using the KVM switch. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, May 21, 2004 1:39 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service I also have the 2002 Admin pack. Back then we paid $999 for it. I have saved several shared servers with it more than covering the $999 but now it is closer to $5000 I believe. It may be worth it as well. All their products are great. Go to the freeware site sysinternals.com and get all their tools. Even the simple Bginfo screen background is the handiest utility. It builds a very simply BMP that has all your system info and becoms the desktop background. Nothing fancy just the info. You can run it on boot up or schedule it to update every few hours if needed. Great on desktops and servers. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Thursday, May 20, 2004 12:14 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service ERD commander is an awesome tool, helps change service/device startup values, registry, connect through the network to other machines, chkdsk, etc etc... Might take a look at that, helps me a TON. I was going to recommend that, as I have the 2002 version, but their new licensing terms has priced the newer version completely out of reach for the average small business. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Passing a bogus zip.
Do you have a BANNAME entry for that one? Matt Markus Gufler wrote: I believe the spaces in the BANNAME was fixed in 179i6 and higher. I have successfully blocked "Deleted Attachment" I'm running 1.79i7 now and messages containing an attachment like "Norton AntiVirus deleted1.txt" still pass our virus filter. ? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.Virus] Passing a bogus zip.
For sure! I tried now with different files and found why certain files ar not blocked with BANNAME. At the moment it's not possible to block file attachments if the name contains special characters. For example "Norton Antivirus gelöscht1.txt" the german version of "Norton Antivirus deleted1.txt" will pass the filter even if there is a BANNAME entry for this file. Now I've tried to use the encoded filename "Norton Antivirus gel=F6scht1.txt" but the file is still passing the filter. :-( It's not so important - until you receive a lot of "Symantec-german cleaned" messages. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Friday, May 21, 2004 6:49 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.Virus] Passing a bogus zip. Do you have a BANNAME entry for that one?MattMarkus Gufler wrote: I believe the spaces in the BANNAME was fixed in 179i6 and higher. I have successfully blocked "Deleted Attachment" I'm running 1.79i7 now and messages containing an attachment like "Norton AntiVirus deleted1.txt" still pass our virus filter. ? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.Virus] Passing a bogus zip.
That's good, something for Scott's plate when he comes back. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/21/04 03:34PM For sure! I tried now with different files and found why certain files ar not blocked with BANNAME. At the moment it's not possible to block file attachments if the name contains special characters. For example Norton Antivirus gelöscht1.txt the german version of Norton Antivirus deleted1.txt will pass the filter even if there is a BANNAME entry for this file. Now I've tried to use the encoded filename Norton Antivirus gel=F6scht1.txt but the file is still passing the filter. :-( It's not so important - until you receive a lot of Symantec-german cleaned messages. Markus _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, May 21, 2004 6:49 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Passing a bogus zip. Do you have a BANNAME entry for that one? Matt Markus Gufler wrote: I believe the spaces in the BANNAME was fixed in 179i6 and higher. I have successfully blocked Deleted Attachment I'm running 1.79i7 now and messages containing an attachment like Norton AntiVirus deleted1.txt still pass our virus filter. ? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
