Title: Problems with catching Virus
You
might also check your realtime monitor settings for Innoculate. I found
what was happening was that declude would decode the attachment and innoculate
would delete it before it could be tested. From there the only logical
response for declude and
I'm getting a boatload of xmascottage.shs , christmas.shs types of files.
These are banned extensions, but not detected by F-prot. I'm very suspicious
of these - any other experiences?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came
I'm getting a boatload of xmascottage.shs , christmas.shs types of files.
These are banned extensions, but not detected by F-prot. I'm very
suspicious
of these - any other experiences?
You're right to be suspicious of these
attachments.
http://www.stiller.com/shs.htm explains what it is and can do. FWIW you
could add this extention into the virus.cfg file of declude or simply set to
catch via the rules.ima.
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]