[Declude.Virus] Virtual domains

2005-01-14 Thread Chris Hunt
My company is merging with another printing company (they are moving in w/us) I setup a virtual domain for their old domain and also the new domain. Email is flowing just fine. Does declude AV protect virtual domains? Chris --- [This E-mail scanned for viruses by Declude/F-Prot AV] --- [This E-m

Re: [Declude.Virus] Release version

2004-09-28 Thread Chris Hunt
I went to the old way, then I got the email just a few minutes later... Declude Customers, Today we have released Declude Version 1.80 which is available to all customers with a Valid Service Agreement. Please log into your account www.declude.com/myaccount.asp to download the latest version I'm on

[Declude.Virus] Release version

2004-09-28 Thread Chris Hunt
Scott, I just DLed the release and the declude -diag shows it at 1.75 Chris Hunt The only new release today is 1.80, which as expected, had the GDIPlus.dll Exploit detection. --- [This E-mail scanned for viruses by Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.Virus] INor.D

2004-03-12 Thread Chris Hunt
I'm using interim release 16, Pro. Here should be the relevant lines. Chriis BANEZIPEXTS ON BANEXT EZIP BANEXT asd BANEXT ade BANEXT adp BANEXT asp BANEXT ATT BANEXT bat BANEXT cab BANEXT chm BANEXT CEO BANEXT cmd BANEXT COM BANEXT css BANEXT crt BANEXT cpl BANEXT cnt BANEXT dll BANEXT EXE BANEXT

[Declude.Virus] INor.D

2004-03-12 Thread Chris Hunt
I just had a email slip by my IMail server to my PC with the Inor.D in a .zip (with a .exe inside) Both are running latest .C version of F-Prot. What could I have in my virus.cfg that allowed this? I still have the .zip if anyone wants it. Chris --- [This E-mail scanned for viruses by Declud

Re: [Declude.Virus] new forging worm: Bagle

2004-01-19 Thread Chris Hunt
If you banned exe attachments then you would already be protected. How about telling us the version of F-Prot and Declude? At 10:08 AM 01/19/2004 -0500, you wrote: Scott, These are my def status: SIGN.DEF created 18 January 2004 SIGN2.DEF created 19 January 2004 MACRO.DEF created 12 January 2

Re: [Declude.Virus] Zips are corrupt

2003-11-03 Thread Chris Hunt
They are regular emails, I just sent you an example. Chris At 12:56 PM 11/03/2003 -0500, you wrote: I'm trying to narrow down a problem where zip attachments that are received via IMail 8.03 w/hf are corrupt. Same zip via FTP or HTTP check out OK. Using the latest Declude virus beta and F-Pr

[Declude.Virus] Zips are corrupt

2003-11-03 Thread Chris Hunt
I'm trying to narrow down a problem where zip attachments that are received via IMail 8.03 w/hf are corrupt. Same zip via FTP or HTTP check out OK. Using the latest Declude virus beta and F-Prot 3.14b. The declude log looks great, no errors. Chris [EMAIL PROTECTED] --- [This E-mail scanned

RE: [Declude.Virus] IMail 7.15 and F-Prot 3.14

2003-07-03 Thread Chris Hunt
I don't see anything unusual in the declude or imail logs and my virus.cfg has SCANFILE e:\F-Prot\Fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt I'll have to wait until the next lockup/error message. Chris > server. I'm running Declude Virus v1.70 also. Chris, you k

[Declude.Virus] IMail 7.15 and F-Prot 3.14

2003-07-03 Thread Chris Hunt
Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen web messaging lock up twice and I get a SMTP error on the IMail server. The error message (didn't write it down) is a pop-up window on the server. I'm running Declude Virus v1.70 also. Chris --- [This E-mail scanned for

Re: [Declude.Virus] Multiple To: in notifications

2002-07-16 Thread Chris Hunt
Have Declude send to a IMail Alias then just add the e-mail addys in there. Chris At 12:54 PM 07/16/2002 -0600, you wrote: >Is there a way to specify multiple recipients in the notifications? I'd >like to also receive the BANnotify e-mails. > >Also, is there a way to have BANext send the messag

Re: [Declude.Virus] Virus software

2002-07-15 Thread Chris Hunt
Paul, for a whopping $40 you could get the commercial version of F-Prot that also gives you a licence for 19 other PCs. www.frisk.is Personally, I've found McAfee and Symantec use way to much PC resources. Chris At 02:35 PM 07/15/2002 -0400, you wrote: >We own a copy of Declude Virus. The

[Declude.Virus] DriveA Boot Sector

2002-05-07 Thread Chris Hunt
Here is the email from Frisk. Scott, can this list take attachments? the file they sent me is 256k zip. Chris == Dear Chris, Thank you very much for your mail. In F-Prot's Real Time Protector version 3.11b and 3.12 for Windows 95/98 and ME systems there was a bug which gave the followi

[Declude.Virus] DriveA Boot Sector

2002-05-06 Thread Chris Hunt
I've recently became legit with F-Prot as a company wide standard (your can't beat their licensing vs. McAfee or Symantec) On my Desktop running 3.12 with 4/29defs Clean floppy, copy a text file to it from my desktop and I get "Drive A Boot Sector  could be infected with an unknown virus" Running

[Declude.Virus] F-Prot 3.11b

2002-03-13 Thread Chris Hunt
Speaking of F-Prot, a client of mine bought F-Prot 3.11b and complained of slowness problems with loading Lotus Organizer and Eudora. The frisk.is site mentions a problem with slowness with IE but I had him DL the zip. installed and rebooted and his slowness problems went away with his applica

Re: [Declude.Virus] Prescaning the party

2002-01-29 Thread Chris Hunt
F-Prot has new Def data today 1/29/02 that fix the identity issue. Chris At 09:53 PM 01/29/2002 +, you wrote: >And if I don't have a prescan line, the default is on or off ? > >BTW, someone just sent me a copy, and fprot did not identify the virus >correctly, notification said unknown virus.

RE: [Declude.Virus] MY Party

2002-01-28 Thread Chris Hunt
In your virus.cfg add these (edit to suit) SKIPEXT GIF SKIPEXT PDF SKIPEXT TXT SKIPEXT JPG SKIPEXT MPG SKIPEXT PDF BANEXT lnk BANEXT vbs BANEXT scr BANEXT shs BANEXT wsh BANEXT vbx BANEXT bat BANEXT cab BANEXT nws BANEXT asp BANEXT dll BANEXT cmd B

Re: [Declude.Virus] MY Party

2002-01-28 Thread Chris Hunt
My desktop F-Prot is on my Home Email which does not get scanned by Declude. Weird part is that F-Prot Real-Time protector alert me but does not offer to disinfect/delete Chris At 12:44 PM 01/28/2002 -0500, you wrote: >Anyone catching these with Declude / F-Prot? > >We have seen dozens come in

[Declude.Virus] Funny how....

2001-12-11 Thread Chris Hunt
[EMAIL PROTECTED] is used only as a recipient for Declude Virus and now its getting (attempted) viruses. I thought the Badtrans was done but maybe some domains are slow ;) Chris === To: <[EMAIL PROTECTED]> Subject: virus detected Declude Virus v1.29 caught the : W32/Badtr

RE: [Declude.Virus] Declude v1.29 beta released

2001-12-07 Thread Chris Hunt
I always try it but then I'm not a ISP and have a low volume IMail server. Chris At 10:42 AM 12/7/01 -0600, you wrote: >How stable is a Declude beta? > >Can we run it on a production machine or should we wait for "production" >code. > >(We're scared of new production code from most vendors (iMai

Re: [Declude.Virus] New W32/Goner-A virus

2001-12-04 Thread Chris Hunt
In your virus.cfg file in your declude folder Works perfectly BANEXT lnk BANEXT vbs BANEXT scr BANEXT shs BANEXT wsh BANEXT vbx BANEXT bat BANEXT cab BANEXT nws BANEXT asp BANEXT dll BANEXT cmd BANEXT xml BANEXT sys BANEXT asd BANEXT chm BANEXT ocx BANEXT vbe BANEXT wsf BANEXT js Your vir*.log f

RE: [Declude.Virus] New W32/Goner-A virus

2001-12-04 Thread Chris Hunt
Would it not just be easier to BANEXT scr in your virus.cfg file? Chris At 02:48 PM 12/4/01 -0500, you wrote: >No F-Prot is not chaching it ..I have caught 68 since 2:15pm when a user >called me to ask could the install this screen saver. I am caching by >filtering the subject line and body text

Re: [Declude.Virus] MISSING_REVERSE_DNS:I-Mail Anti-Virus

2001-11-28 Thread Chris Hunt
Your wallet will know the answer ;) At 07:48 AM 11/28/01 -0500, you wrote: >Will Declude be affected by the new release of I-Mail's Anti-Virus software? >I've been very happy with Declude and have no desire to switch. I'm a >little worried though that now that I-Mail has their own anti-virus ad

[Declude.Virus] H:Mac Virus and F-Prot

2001-10-19 Thread Chris Hunt
One of my Macs just got a older SevenDust 666 virus and I'm trying to see if it was delivered by email or other way. F-Prot claims 58,000+ viruses but I can't find a specific list. I also can't see where Mac Viruses are detected. Anyone know? Thanks Chris This E-mail came from the Declude.Vi

[Declude.Virus] H:Declude Enhancement

2001-10-08 Thread Chris Hunt
Scott, is there any way that the virMMDD.log for declude can contain more info that below when handling banned extensions?  Thanks Chris 10/08/2001 08:39:57 Q9e9a13e Scanned: Banned file extension. [BINHEX: 1 0][MIME: 3 274192]

[Declude.Virus] H:

2001-10-08 Thread Chris Hunt
Hey Serge, how about not sending the whole list the virus? [EMAIL PROTECTED] would be better. Scott, Serge's email did get past my Declude 1.26a and F-Prot (Sept 22 defs), My desktop Mcafee caught it. Chris This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an

H:Re: [Declude.Virus] Virus notifications

2001-09-25 Thread Chris Hunt
Could McAfee be deleting the virus even before declude gets to scan it? At 07:53 AM 9/25/01 -0400, you wrote: >Scott, > >Up until now, I have been getting the Declude email notifications that a >virus was received on blah blah date, blah blah virus, etc. This E-mail came from the Declude.Virus

[Declude.Virus] H:Nimba

2001-09-19 Thread Chris Hunt
Yea, I finally got one ;) Ofcourse the FROM: is not valid Declude and DOS F-Prot Chris == Declude Virus v1.25a caught the : W95/Nimda.A@mm virus in readme.exe from [EMAIL PROTECTED] to: [EMAIL PROTECTED] Date: 09/19/2001 16:30:03 Subject:ware\Microsoft\WindoJb4 ñcircledownlo

[Declude.Virus] H:Made my morning

2001-08-16 Thread Chris Hunt
Finally, after a week! Chris === To: <[EMAIL PROTECTED]> Subject: Declude Virus caught a virus Declude Virus caught a virus with the subject "older folk who " from [EMAIL PROTECTED] to: [EMAIL PROTECTED] The spool file name is Ded091d8.SMD. This E-mail came from the Declude.Virus mailing

Re: REVDNS:Re: H:Re: [Declude.Virus] F-Prot Updates?

2001-08-15 Thread Chris Hunt
Yes and it emailed me and duped the alert to my nextel phone. The declude virus logs show activity. Outlook is banned in my company ;) I still have the 3,000 rules.ima I've been tweaking since V4 for SPAM control and virus backup. Chris At 07:41 AM 8/15/01 -0500, you wrote: >Did you test t

H:Re: [Declude.Virus] F-Prot Updates?

2001-08-15 Thread Chris Hunt
At least your catching something.   I installed Declude Virus last Thursday and have not caught 1 single infected virus, not that is powerful software!  ;)  It scares them into not even sending infected files.  Of course when I'm at Myrtle Beach next week. Chris My data files are curr