Re: [Declude.Virus] Serious Problem with attachments and AVG 7

2004-06-11 Thread R. Scott Perry

After much head scratching, I turned off AVG (our 2nd virus scanner), and 
it appears that the
problem has gone away.
Someone without access to post to the list sent this information:
---
I had the same problem with AVG's update.
AVG changed/broke the scanner command line switches, they removed NOEXPORT
and broke ARCW and RTW.
You can make declude work by removing the switches /NOEXPORT  /ARCW and /RTW
Problems like this is are a good reason to leave DELETEVIRUSES OFF and
DELIVERERRORS ON, then manually delete the virus files
---
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread Markus Gufler

http://vil.nai.com/vil/content/v_126242.htm

Please update the forging list to prevent false warnings.

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread R. Scott Perry

http://vil.nai.com/vil/content/v_126242.htm
Please update the forging list to prevent false warnings.
Our forging virus database has now been updated to include Zafi
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread Markus Gufler

 http://vil.nai.com/vil/content/v_126242.htm
 
 Please update the forging list to prevent false warnings.
 
 Our forging virus database has now been updated to include Zafi


We've received back some wirus warnings send to the recipients because the
recipients name of the address was not walid (only the domain)
I'm not 100% sure but maybe it's better to disable any virus warning
regarding this worm.

BTW: in the last 30 minutes I've seen 14 Zafi's send from different IP's to
different recipients.

Have a nice weekend

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] BSOD and IMail-Server reboot

2004-06-11 Thread Douglas Cohn
This problem has not gone away.  It occurs with very high traffic only and
is not related to declude.  That is we tested iot without declude and it
still Blue Screens when there is extremely high traffic.

Imail claims that when the server has extremely high traffic you need to use
a SERVER NIC in the machine.  One which does NOT offload processing to the
server but has it's own processor onboard the NIC.

This has some logic but if true why on servers running only SMTP passing
double the amount of sustained traffic do we not also have the issue.

Using Intel Based SE7501WV2 baseboards with on board nics on sevweral
servers.  Only Imail servers Blue Screen.  We set them to auto reboot and it
only happens in extremely high traffic times.

DC 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Uwe Degenhardt
Sent: Thursday, June 10, 2004 5:05 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] BSOD and IMail-Server reboot

Hi list and especially
Peter Verzoni.

Peter you mentioned a while ago
the following problems you had on one of your servers:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg06418.html

Did you (or someone else) find a solution in the meantime, or did you just
switch to another AV ?

Would be great to get the link where you posted the info to F-Prot as well.

Thank you.

Uwe

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] BSOD and IMail-Server reboot

2004-06-11 Thread John Tolmachoff \(Lists\)
There has been much discussion concerning Intel OB NICs and Imail.

Search the archives.

Bottom line, get a solid Server designated NIC.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Douglas Cohn
 Sent: Friday, June 11, 2004 11:32 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] BSOD and IMail-Server reboot
 
 This problem has not gone away.  It occurs with very high traffic only and
 is not related to declude.  That is we tested iot without declude and it
 still Blue Screens when there is extremely high traffic.
 
 Imail claims that when the server has extremely high traffic you need to
use
 a SERVER NIC in the machine.  One which does NOT offload processing to the
 server but has it's own processor onboard the NIC.
 
 This has some logic but if true why on servers running only SMTP passing
 double the amount of sustained traffic do we not also have the issue.
 
 Using Intel Based SE7501WV2 baseboards with on board nics on sevweral
 servers.  Only Imail servers Blue Screen.  We set them to auto reboot and
it
 only happens in extremely high traffic times.
 
 DC
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Uwe Degenhardt
 Sent: Thursday, June 10, 2004 5:05 AM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] BSOD and IMail-Server reboot
 
 Hi list and especially
 Peter Verzoni.
 
 Peter you mentioned a while ago
 the following problems you had on one of your servers:
 
 http://www.mail-archive.com/[EMAIL PROTECTED]/msg06418.html
 
 Did you (or someone else) find a solution in the meantime, or did you just
 switch to another AV ?
 
 Would be great to get the link where you posted the info to F-Prot as
well.
 
 Thank you.
 
 Uwe
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just
 send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.