RE: [Declude.Virus] netsky p ?

2004-03-26 Thread Douglas Cohn
Is there any thought about changing this?  IE removing the attachment and
passing the email through.

Or is the case I gave very rare??  IE a legitimate email with the
Quarantined Attachment.txt. And if not blocked it will come through, I am
aware as I do not block them.

Why add Quarantined Attachment.txt to the list of banned names?  Who cares
if it gets through?  It is not a virus anymore, and if it is it will be
detected.

Basically I am asking if anyone knows whether the percentage of the emails
that have been cleaned and replaced with this ridiculous text file, viruses
or just attachments that are not allowed.

Thanks guys

Doug  



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, March 25, 2004 9:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] netsky p ?


So again the question is does banname block the attachment or the email 
and the attachement???

It should treat the E-mail the same way as a banned file extension, sending
out the \IMail\Declude\bannotify.eml file.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] netsky p ?

2004-03-26 Thread R. Scott Perry

Is there any thought about changing this?  IE removing the attachment and
passing the email through.
That is not likely to happen soon, as it requires MIME encoding (which 
Declude doesn't do at all -- it only does MIME decoding).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] netsky p ?

2004-03-24 Thread Jay Calvert
Virus Def's are always up to date, lately I check almost every half hour.

Trend  Pattern 835

I am going to install a second scanner (McAfee Virus Scan 7) to see if that
helps.


Jay


- Original Message - 
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, March 24, 2004 8:53 AM
Subject: Re: [Declude.Virus] netsky p ?



 They are still getting through..

 Are your virus definition files up to date (Netsky.P just started
spreading
 within the past two days)?  Are any getting caught (if so, the ones that
 are not are probably ones with no virus attached, or corrupt, non-viable
 variants)?  What does the Declude Virus log file say for ones that get
through?

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.