-data.zip
BODY 0 CONTAINS Account and Password Information are attached!
Rick Davidson
National Systems Manager
North American Title Group
440-639-0607 - Office
951-233-6342 - Mobile
[EMAIL PROTECTED]
-
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E
It is coming in with alot of different zip file names and body names now, I
blocked all zip files and submitted samples
I am really getting hit hard
Rick Davidson
National Systems Manager
North American Title Group
440-639-0607 - Office
951-233-6342 - Mobile
[EMAIL PROTECTED]
-
- Original
was right on top of it with a def release. kudos to them.
John C that is hilarious!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, November 21, 2005 4:53 PM
Heads up I am getting flooded with virus like emails with .rar attachments
I have them banned so they are not making it to my users but they are making
it past the virus scanner
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses
Isn't trusting MS with security related tasks like asking Michael Jackson to
babysit your kids?
:-)
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL
I had to move them to a sub directory or delete
them to get them to stop, renaming didnt work
Rick DavidsonNational Systems ManagerNorth American Title
Group-
- Original Message -
From:
Darin Cox
To: [EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 10:37
AM
whose application sends them with the file information in the header...
BODY STOPALLTESTS CONTAINS .PDF
HEADERS STOPALLTESTS CONTAINS .PDF
BODY STOPALLTESTS CONTAINS Content-Type: application/pdf
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message
Doesn't the newer versions of Declude Virus catch the IFRAME vulnerability?
The problem with the current virus strains is that they do not contain any
vulnerabilty at all
The IFRAME vulnerability exists on the site contained in the body link
Rick Davidson
National Systems Manager
North American
If you have junkmail pro you can body filter for
the following, if not setup Imail rules to look for these phrases
BODY 0 CONTAINS My name is Jane, I am from
Miami, FL.BODY 0 CONTAINS Hi! I am looking for new friends. I am from
MiamiBODY 0 CONTAINS PayPal has successfully charged $175
photos!FREE ADULT VIDEO!
SIGN UP NOW!:1639/
:1640/
Rick DavidsonNational Systems ManagerNorth American Title
Group-
- Original Message -
From:
Rick Davidson
To: [EMAIL PROTECTED]
Sent: Tuesday, November 09, 2004 9:54
AM
Subject: Re: [Declude.Virus] New MyDoom
dont recall any false
positives and I didnt have a problem with the latest bagle garbage. Better
safe than sorry if you ask me.
Rick Davidson
National Systems Manager
North American Title Group
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
I ban EXE files so it was held in the virus folder one one of my gateways.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 22, 2004 12:50 PM
Subject: Re
Its likely a self extracting zip archive, winzip allows you to create exe
zip archives
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
- Original Message -
From: Chris Patterson [EMAIL
beware! somewhere between version 8 and 8.12 ISPLCLN.EXE will delete all log
files older than 5 days regardless of the number specified after the -l flag
I have not checked to see if it was fixed in 8.13
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message
Yea this one doesnt look good. Hope Declude can come up with a way to
identify these exploit jpeg images in email
http://www.us-cert.gov/cas/alerts/SA04-258A.html
http://www.microsoft.com/security/bulletins/200409_jpeg.mspx
http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx
Rick
Thanks Scott!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 28, 2004 9:01 AM
Subject: [Declude.Virus] F-Prot and Mydoom.O
It turns out that there is a flaw
zip file issue I will refrain.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, July 26, 2004 2:37 PM
Subject: RE: [Declude.Virus] F-Prot errors starting at 4:00 AM
investigating these.
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type
In the virus.cfg set DELETEVIRUSES ON
That will leave non infected banned files in the virus directory
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Carter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 17, 2004 4:03 PM
know who the sender was. I wished for a remote choking
apparatis at that moment.
/end user humor
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Douglas Cohn [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 02, 2004 9:26 AM
such as mpegs and mp3s
Works great
I dont mind sharing the code if anyone wants it
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Hermann Strassner [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 28, 2004 6:39 AM
Subject: [Declude.Virus
Great Idea! I will add that and post the files
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 28, 2004 12:57 PM
Subject: RE: [Declude.Virus] Notification
My servers are sending out the ban notify messages on the cpl and hta
extensions, I use Fprot, shouldnt it be caught as a virus and respect the
SKIPIFVIRUSNAMEHAS Beagle? (or bagle)
I am seeing ALOT of these over the past few hours
Rick Davidson
National Systems Manager
North American Title
I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta,
I can't answer for certain.
ooo those dirty rats! probly because their anti-spam setup is looks like
Fisher-Price stuff compared to Declude :-)
Rick
---
[This E-mail was scanned for viruses by Declude Virus
domains listed, the url-domain list is
a false positive nightmare.
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
blacklisted as spam sources... havent seen this before,
suspicious if you ask me. At least they were stopped since at 6PM last night
upper management mandated me to allow exe attachments through again
sigh.
Anyone else see this?
Rick Davidson
National Systems Manager
North American Title Group
440
/2004 19:11:01 Q751409530072c4c8 Scanned: Banned file extension. [MIME:
3 1052]
Is there an explanation?
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
- Original Message -
From: Jay
an excellent new feature it created the need to allow
bypassing on a per user basis.
Whats our chances of seeing something like this?
Rick Davidson
National Systems Manager
North American Title Company
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
---
[This E-mail
/Declude
Have a great day!
Rick Davidson
Buckeye Internet Services
www.buckeyeweb.com
440-953-1900
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 17, 2002 12:44 PM
Subject: [Declude.Virus] If you are using McAfee's on-access virus
the head.
Content-Type: Multipart/Alternative;boundary=MuLtIpArT_BoUnDaRy
Alright, now my first attempt to send this to the list was caught as a
banned file saying that there is an attachment with the .com extension.
Hopefully the zip will get it through.
weird
Have a great day!
Rick Davidson
http://www.f-prot.com/
Have a great day!
Rick Davidson
Buckeye Internet Services
www.buckeyeweb.com
440-953-1900
-
- Original Message -
From: Full Name [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 20, 2002 5:31 PM
Subject: [Declude.Virus] Legal issue
What virus
31 matches
Mail list logo
