this problem?
Todd
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, October 21, 2004 1:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] MyDoom.o's slipping through.
Why are you not banning executable files
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Todd Holt
Sent: Friday, October 22, 2004 9:07 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] MyDoom.o's slipping through.
Is it not true that EXEs in zip files are inert until opened by the user?
We don't ban EXEs in zips
: [Declude.Virus] MyDoom.o's slipping through.
You should NOT use the dos scanner but instead use the Windows 32 bit
command line scanner. You would change the command to
C:\Progra~1\FSI\F-Prot\fpcmd.exe. Also there are some other changes
needed
to reflect the different program. This is my current command line
Yes
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Chris Patterson
Sent: Friday, October 22, 2004 12:52 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] MyDoom.o's slipping through
- Original Message -
From: Chris Patterson [EMAIL PROTECTED]
Does anyone else agree using the 32 bit command
line scanner is better than the dos?
Absolutely! If you have it available to you (meaning you have the Windows
version of F-Prot), using it will provide a nice performance
I have had two reports in the last 2 days about a virus coming through.
The customer forwarded these to me on an Exchange mailbox using Mcaffee
which identified them as MyDoom.o. Tracing the Logs, they were scanned
and Deemed Virus Free using Prescan.
Anyone have this issue?
Declude 1.81,
Chris,
It's always helpful to share the actual lines of your log when asking a
question such as this. That will clear up any possible misperceptions
and allow one to focus on what happened.
Matt
Chris Patterson wrote:
I have had two reports in the last 2 days about a virus coming through.
The
:[EMAIL PROTECTED]
Sent: Thursday, October 21, 2004 12:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MyDoom.o's slipping through.
Chris,
It's always helpful to share the actual lines of your log when asking a
question such as this. That will clear up any possible misperceptions
] MyDoom.o's slipping through.
Chris,
It's always helpful to share the actual lines of your log when asking a
question such as this. That will clear up any possible misperceptions
and allow one to focus on what happened.
Matt
Chris Patterson wrote:
I have had two reports in the last 2
get a valid zip file named that way.
- Original Message -
From: Chris Patterson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 21, 2004 12:01 PM
Subject: RE: [Declude.Virus] MyDoom.o's slipping through.
Log Files:
10/19/2004 12:58:45 Q47c21ade0114a44b MIME file
I have had two reports in the last 2 days about a virus coming through.
The customer forwarded these to me on an Exchange mailbox using Mcaffee
which identified them as MyDoom.o. Tracing the Logs, they were scanned
and Deemed Virus Free using Prescan.
Given that it is in a .ZIP file, and you are
Network Engineer
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 21, 2004 3:25 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MyDoom.o's slipping through.
I have had two reports in the last 2 days about a virus coming through.
The customer
]
Subject: RE: [Declude.Virus] MyDoom.o's slipping through.
Thanks, I was not aware of the /ARCHIVE=5. I have adjusted that, here
is my current cfg line:
C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5
/NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt
If there is something I am
13 matches
Mail list logo
