We have just released Declude Virus v1.48 (
http://www.declude.com/virus/manual.htm ), a beta version. The noticeable
changes include:
o Detection of the Outlook Blank Folding vulnerability
o An issue with ONACCESS ON setting fixed
-Scott
---
on 4/23/02 1:48 PM, R. Scott Perry wrote:
We have just released Declude Virus v1.48
Scott,
1. What is the Outlook Blank Folding Vulnerability? I just saw it in my
log file.
2. Does the order of SKIPVIRUSNAMEHAS and ONLYSENDIFLOCALSENDER matter in
the .eml files?
3. Are there any other
1. What is the Outlook Blank Folding Vulnerability? I just saw it in my
log file.
That occurs when an E-mail header consists of just a single tab character,
followed by a carriage return and linefeed. Outlook treats this the same
as a blank line, and starts processing the headers immediately
Anyone been seeing a huge amount of the Klez virus messages going around?
We are a fairly small hosting company and we have had over 100 today.
Usually just see around half dozen viruses a day.
Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
I have one user who has been sent a virus about 15 times today she is
getting tired of the auto coming to her. What would be the best solution
be. Ban the incoming IP with Imail rules?
Oh the other postmaster for the address is not responding. It is the
KLEZ.H so I know it is spoofing the
I just ran VirusLog Analyzer this is what I have gotten today. We have
around 300 users that's it. I looked at the last 7 days and each has
been pretty heavy.
Scott you are DMAN! Thanks for a great product
Count= 72 Virus Name= the W32/Klez.h@MM virus !!!
Count= 50
Klez seems to be HUGE today (it's been ramping up the last few days).
- Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Grant Griffith
Sent: Tuesday, April 23, 2002 3:38 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] Huge amount of Klez going
We don't send a message to the recipient, therefore don't have this problem.
We just send a notification to the sender, which I know sometimes is
spoofed, but have not had time to implement the newer features yet. :)
Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
We normally see around a dozen per day, but starting last Wednesday, it
jumped to about 75-100 per day with all of the Klez.H.
John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
-Original Message-
From: [EMAIL PROTECTED]
Oh the other postmaster for the address is not responding. It is the
KLEZ.H so I know it is spoofing the Address so I can't really blame him.
Can I?
With 1.47, you can add SKIPIFVIRUSNAMEHAS Klez to the otherpostmaster.eml
file, and the notification won't go to the other postmaster.
As for
Just found it myself. Just goto www.declude.com and goto the Free Web
Tools. It is out there. Not sure who built it, but appears to work well.
We did not have our log level set to Mid, therefore can't see anything right
now, but will be able to from now on. Nice Tool!
Sincerely,
Grant
11 matches
Mail list logo