Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Lenny Bauman
Scott           I have sent the message with infected .mbx as you have asked.                       Lenny Bauman - Original Message - From: R. Scott Perry To: [EMAIL PROTECTED] Sent: Saturday, January 11, 2003 1:46 PM Subject: Re: [Declude.Virus] Lentin virus

Re: [Declude.Virus] Lentin virus passing declude and f-protbut caught by local f-prot but caught by local f-prot

2003-01-11 Thread R. Scott Perry
I have the .mbx file with the infected mail in it. What address do you me to send it to. If you could send it to [EMAIL PROTECTED], that would be great. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail c

Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Lenny Bauman
: Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot >   I am running v1.53.  I will look into getting the .mbx file from the > billing managers mail box if I can.I would recommend upgrading to v1.65, as there have

Re: [Declude.Virus] Lentin virus passing declude and f-protbut caught by local f-prot but caught by local f-prot

2003-01-11 Thread R. Scott Perry
I am running v1.53. I will look into getting the .mbx file from the billing managers mail box if I can. I would recommend upgrading to v1.65, as there have been a number of improvements since 1.53. If you can get a copy of the E-mail in an .mbx file, that would be very helpful, as I can t

Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Serge
i had the same problem with lentin while running declude 1.61 upgrading to 1.65 fixed the problem     - Original Message - From: Lenny Bauman To: [EMAIL PROTECTED] Sent: Saturday, January 11, 2003 3:57 PM Subject: Re: [Declude.Virus] Lentin virus passing

Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Lenny Bauman
, January 10, 2003 6:38 PM Subject: Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot > I have a customer that is infected with the > <mailto:w32/Lentin.H@mm>w32/Lentin.H@mm virus.  He is sending mess

Re: [Declude.Virus] Lentin virus passing Declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Lenny Bauman
Tolmachoff To: [EMAIL PROTECTED] Sent: Friday, January 10, 2003 8:38 PM Subject: RE: [Declude.Virus] Lentin virus passing Declude and f-prot but caught by local f-prot but caught by local f-prot > > I have a customer that is infected with the> > <mailto:w32/

RE: [Declude.Virus] Lentin virus passing Declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-10 Thread John Tolmachoff
> > I have a customer that is infected with the > > w32/Lentin.H@mm virus. He is sending messages > to > > my Billing manger and they are going through. I should point out at this > > time that to message does not set off f-prot on her computer. She has > > forwaeded

RE: [Declude.Virus] Lentin virus

2002-07-22 Thread R. Scott Perry
>Interesting though, I have not seen any virus notices. > >Even more interesting, I saved my message that I sent as a .msg file to >my desktop, scanned it with Norton AV 7.6, and it showed clean. What happened is that you had posted the MIME headers as well as the standard E-mail headers. I'm

RE: [Declude.Virus] Lentin virus

2002-07-22 Thread John Tolmachoff
www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Sheldon Koehler Sent: Monday, July 22, 2002 10:37 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Lentin virus I had to add "SKIPIFVIRUSNAMEHAS Lentin" as we were seeing a lot

Re: [Declude.Virus] Lentin virus

2002-07-22 Thread Sheldon Koehler
I had to add "SKIPIFVIRUSNAMEHAS Lentin" as we were seeing a lot of MAILER-DAEMON@localhost bounce messages. I was not sure if it was someones badly configured mail program or if Lentin was screwing things up. Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward C

RE: [Declude.Virus] Lentin virus

2002-07-22 Thread John Tolmachoff
RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Monday, July 22, 2002 10:18 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Lentin virus >Below are the full headers of

Re: [Declude.Virus] Lentin virus

2002-07-22 Thread R. Scott Perry
>Is Lentin known to forge the headers? Or am I dealing with intentional >activity? > >I have tried looking at Symantec but could not find an answer. http://www.sophos.com/virusinfo/analyses/w32yahae.html shows that it sends the E-mail on its own, so it can (and does) create whatever headers it