I did contact f-prot now the second time. I did not get an answer till now.
Uwe
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, May 03, 2005 3:21 AM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
The sign*.def files
: [Declude.Virus] F-Prot and HTML object exploit
The sign*.def files have been updated to:
05/02/2005 11:46 PM
Which I'm pretty sure is UTC. However, these still have the
false-positive. As of this writing, I've received no reply to my ticket
with F-Prot.
Andrew 8)
-Original Message-
From
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
Hello,
in the moment I got this email from F-prot support:
Unfortunately, virus signature files released at 17:00 on 2 May 2005
included a false positive detection identified as: Infection:
HTML/[EMAIL PROTECTED
I tested it the last hours and had no FP since the new update.
Uwe
- Original Message -
From: Chris Fitch [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, May 03, 2005 4:44 PM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
I have these installed and appears
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Wind
Sent: Tuesday, May 03, 2005 8:04 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I tested it the last hours and had no FP since the new update.
Uwe
- Original Message -
From: Chris Fitch
, Andrew
Sent: Tuesday, May 03, 2005 9:13 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Agreed, the current *.def files no longer trigger on my sample
false-positive files.
Also, I had exactly the same message from F-Prot support waiting for me
It appears that something has updated on F-Prot in the last hour. Now, a lot
of outbound HTML e-mails are being flagged by F-Prot as having the HTML
object exploit. Running the file on www.virustotal.com shows clean.
Any one else seeing problems?
For now, as I am at a client, I have turned off
Thank you for the tip, John.
I searched the logs and since the update there are legitimate E-mail, which
are caught.
Uwe
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 7:46 PM
Subject: [Declude.Virus] F-Prot
: Monday, May 02, 2005 10:46 AM
Subject: [Declude.Virus] F-Prot and HTML object exploit
It appears that something has updated on F-Prot in the last hour. Now, a
lot
of outbound HTML e-mails are being flagged by F-Prot as having the HTML
object exploit. Running the file on www.virustotal.com shows
I am having the same problems here. It all started around 12:30 Central
time...
Don
- Original Message -
From:
Matt
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 12:56 PM
Subject: Re: [Declude.Virus] F-Prot and
HTML object exploit
John,Thanks a bunch
Hickey
Sent: Monday, May 02, 2005
11:14 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus]
F-Prot and HTML object exploit
I am having the same problems here. It all started
around 12:30 Central time...
Don
- Original Message -
From: Matt
How can I roll back ??
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 2:12 PM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
Yes, this is a problem! I rolled back to my latest defs prior to the last
]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 7:46 PM
Subject: [Declude.Virus] F-Prot and HTML object exploit
It appears that something has updated on F-Prot in the last hour.
Now, a lot
of outbound HTML e-mails are being flagged by F-Prot as having the HTML
object exploit. Running the file
Sent: Monday, May 02, 2005 11:50 AM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
How can I roll back ??
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 2:12 PM
Subject: Re: [Declude.Virus] F-Prot and HTML
- Original Message - From: Jeff [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 11:50 AM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
How can I roll back ??
- Original Message - From: Bill Landry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent
, May 02, 2005 7:47 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] F-Prot and HTML object exploit
It appears that something has updated on F-Prot in the last
hour. Now, a lot of outbound HTML e-mails are being flagged
by F-Prot as having the HTML object exploit. Running the file
ve you all running the latest v3.16b ?
I can't see any appearance of "HTML/ObjData" in the entire current logfile,
but I've still running 3.16a
Markus
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John
Tolmachoff (Lists)
Sent: Monday, May 0
I have not updated to 3.16b and have this problem...
Don
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 3:09 PM
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Question: Have you all running the latest
PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] F-Prot and HTML object exploit
It appears that something has updated on F-Prot in the last
hour. Now, a lot of outbound HTML e-mails are being flagged
by F-Prot as having the HTML object exploit. Running the file
on www.virustotal.com
created with Office 10 or Office 11.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Monday, May 02, 2005 1:10 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot and HTML object exploit
Question: Have you all
]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 1:36 PM
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I've been running 3.15b - I'm downloading the latest version now.
Should I install? or will this have no effect on this particular issue?
And what about the previous
(Lists)
Sent: Monday, May 02, 2005 7:47 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] F-Prot and HTML object exploit
It appears that something has updated on F-Prot in the last
hour. Now, a lot of outbound HTML e-mails are being flagged
by F-Prot as having the HTML object exploit. Running
, 2005 1:54 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I also filled out the form at FProt's site. Thanks for the defs. When
I open up FProt, though, it says that my defs are up-to-date, even
though I replaced the newest ones with the ones
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
I also filled out the form at FProt's site. Thanks for the defs. When
I open up FProt, though, it says that my defs are up-to-date, even
though I replaced the newest ones with the ones that you sent. I hope
that that message indicates
PROTECTED] On Behalf Of Bill Landry
Sent: Monday, May 02, 2005 2:03 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-Prot and HTML object exploit
F-Prot may have pulled the latest defs do to the number of complaints
received, which could explain why the app reports that you have the
latest
25 matches
Mail list logo
