It looks like AVG stopped reporting the virus name:
09/23/2003 11:51:42 Q7a1101460132b2c0 Could not find parse string identified in
report.txt
using:
SCANFILE3 C:\Progra~1\Grisoft\AVG7\avg.exe /NOMEM /NOSELF /ARC /REPORT=report.txt
VIRUSCODE3 2
VIRUSCODE3 6
REPORT3
I know this is an old message I'm responding to, but I just noticed that the
latest version of Sawmill at www.sawmill.net includes support for processing
Declude Spam, Declude Virus, and something called Declude Log Format. It
also supports iMail Log Format, iMail Log Format (Alternate), and
Hi;
I am just curious if anyone else is seeing this in their log files:
Couldn't open header datafile
I noticed that today and in tracing it back it appears that this is showing
up in logs after 9/13
No incident of this is in any of the logs before 9/13 and after 9/13 it is
there in every
Kami, I parsed files from 9/1 through today and did not find any incidence
of this string in any of my virus logs. Did find a few Error: 32 opening
new datafile in my logs from 9/3 through 9/16, but nothing since.
Bill
- Original Message -
From: Kami Razvan [EMAIL PROTECTED]
To: [EMAIL
I've seen several messages in Hijack's hold directories that seem to be
infected messages, some have attached files with double extensions like
xls.pif.
I'm worried because sometimes I've to move back to the queue some false
positives and as I've seen that once I do it Declude won't see those
First, I hope you are dealing with what ever situation that put the messages
into the hold folders in the first place.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.Virus-
[EMAIL
Is there anyway to invert the order, make Declude Virus to run before
Hijack? I would like that to happen because of the banned extensions
too.
If you are running the latest version (1.75 or later; you can type
\Imail\Declude -diag from a command prompt to see which version you are
running),
Is it possible to not send out virus notifications to a specific domain that we host
within Imail? For example, if we host 100 domains, and only 1 of the domains says
they do not care to receive the virus notifies (i.e. recep.eml). Thanks,
Keith
áÁj)pjË
