[Declude.Virus] Declude v1.48 (beta) released

2002-04-23 Thread R. Scott Perry
We have just released Declude Virus v1.48 ( http://www.declude.com/virus/manual.htm ), a beta version. The noticeable changes include: o Detection of the Outlook Blank Folding vulnerability o An issue with ONACCESS ON setting fixed -Scott ---

Re: [Declude.Virus] Declude v1.48 (beta) released

2002-04-23 Thread Helpdesk
on 4/23/02 1:48 PM, R. Scott Perry wrote: We have just released Declude Virus v1.48 Scott, 1. What is the Outlook Blank Folding Vulnerability? I just saw it in my log file. 2. Does the order of SKIPVIRUSNAMEHAS and ONLYSENDIFLOCALSENDER matter in the .eml files? 3. Are there any other

Re: [Declude.Virus] Declude v1.48 (beta) released

2002-04-23 Thread R. Scott Perry
1. What is the Outlook Blank Folding Vulnerability? I just saw it in my log file. That occurs when an E-mail header consists of just a single tab character, followed by a carriage return and linefeed. Outlook treats this the same as a blank line, and starts processing the headers immediately

[Declude.Virus] Huge amount of Klez going around?

2002-04-23 Thread Grant Griffith
Anyone been seeing a huge amount of the Klez virus messages going around? We are a fairly small hosting company and we have had over 100 today. Usually just see around half dozen viruses a day. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc.

[Declude.Virus] Virus sent to one user alot

2002-04-23 Thread Paul Ingram
I have one user who has been sent a virus about 15 times today she is getting tired of the auto coming to her. What would be the best solution be. Ban the incoming IP with Imail rules? Oh the other postmaster for the address is not responding. It is the KLEZ.H so I know it is spoofing the

RE: [Declude.Virus] Huge amount of Klez going around?

2002-04-23 Thread Paul Ingram
I just ran VirusLog Analyzer this is what I have gotten today. We have around 300 users that's it. I looked at the last 7 days and each has been pretty heavy. Scott you are DMAN! Thanks for a great product Count= 72 Virus Name= the W32/Klez.h@MM virus !!! Count= 50

RE: [Declude.Virus] Huge amount of Klez going around?

2002-04-23 Thread Tony Gray - Network Administrator
Klez seems to be HUGE today (it's been ramping up the last few days). - Tony -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Grant Griffith Sent: Tuesday, April 23, 2002 3:38 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Huge amount of Klez going

RE: [Declude.Virus] Virus sent to one user allot

2002-04-23 Thread Grant Griffith
We don't send a message to the recipient, therefore don't have this problem. We just send a notification to the sender, which I know sometimes is spoofed, but have not had time to implement the newer features yet. :) Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc.

RE: [Declude.Virus] Huge amount of Klez.H going around?

2002-04-23 Thread John Tolmachoff
We normally see around a dozen per day, but starting last Wednesday, it jumped to about 75-100 per day with all of the Klez.H. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED]

Re: [Declude.Virus] Virus sent to one user alot

2002-04-23 Thread R. Scott Perry
Oh the other postmaster for the address is not responding. It is the KLEZ.H so I know it is spoofing the Address so I can't really blame him. Can I? With 1.47, you can add SKIPIFVIRUSNAMEHAS Klez to the otherpostmaster.eml file, and the notification won't go to the other postmaster. As for

RE: [Declude.Virus] Huge amount of Klez going around?

2002-04-23 Thread Grant Griffith
Just found it myself. Just goto www.declude.com and goto the Free Web Tools. It is out there. Not sure who built it, but appears to work well. We did not have our log level set to Mid, therefore can't see anything right now, but will be able to from now on. Nice Tool! Sincerely, Grant