, March 07, 2004 6:27 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] Swen not
tagged as forging?
I just had a client ask me to turn off all virus
notifications, and the message that they sent back was for Swen.A.
Date: 03/07/2004 17:37:53 Subject: Abort Notice Host: cybermatsa.com.mx
.
John
Tolmachoff
Engineer/Consultant/Owner
eServices
For You
-Original
Message-
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Sunday,
March 07, 2004 6:27
PM
To:
[EMAIL PROTECTED]
Subject:
[Declude.Virus] Swen not
tagged as forging
Yes, Swen forges.
I don't send any auto-notice to sender or recipient on forging viruses.
You don't know who the "real" sender is and it does nothing useful for
the recipient to hear "an unknown PC Sent you a virus, but it was
blocked by the server".
For most of the Macro viruses (and some
Yes, Swen forges.
FWIW, we haven't yet seen a single copy of Swen that forges.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver
Just to clarify. Swen forges the From address, but not the Mail From
address.
I'm reevaluating my choice to only send recipient notices. I may just
change to sender notifications only with SKIPIFFORGING.
Matt
R. Scott Perry wrote:
Yes, Swen forges.
FWIW, we haven't yet seen a single
I'm not seeing both a From and a Mail from listed in the headers that
come back from Declude.
So, it must be in some detail that not in %headers%.
I take it that Declude will send it to the Mail from. Looks like I'll be
testing with Swen Not forging.
You'll see the return address in the
I just had a client ask me to turn off all virus notifications, and the
message that they sent back was for Swen.A.
Date: 03/07/2004 17:37:53
Subject: Abort Notice
Host: cybermatsa.com.mx [148.233.93.6]
Attachment: enqofe.exe
Virus: W32/[EMAIL PROTECTED]
Is it possible that this isn't in
Title: Swen... 200+ daily
Hi..
I have never seen a worst virus I (my email) am receiving 200+ viruses daily. We stopped notifying the receipient but report it to the sender.
This is just out of this world I think it is not receiving much attention since it only targets the UseNet users
: Thursday, October 9, 2003
04:09To: Virus ListSubject: [Declude.Virus] Swen... 200+
daily
Hi..
I have never seen a worst virus I (my email) am
receiving 200+ viruses daily. We stopped notifying the receipient but
report it to the sender.
This is just out of this world I think
Is Swen a forged virus? I tried to get to the .eml links on the manual page
but it didn't go. Need to see if I need to update my notification templates.
Thanks,
Mike
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus
Is Swen a forged virus?
No (as far as Declude is concerned). The From: header is forged, but the
return address (the one that Declude uses) is not forged. It will normally
come from an address that the recipient does not recognize, however (since
it mostly seems to get addresses from web
Title: Swen... Incredible..
Hi;
I am just amazed as to how this Swen is working.
In the last 10 days I have received over 500 Swen viruses. An analysis of all viruses.. Incredibly no 2 viruses have come from the same IP. In other words these 500 viruses have come from 500 different IP's.
Title: Message
Not a single person in the domains hosted on our server has received a
single incident.
Kami,
If it makes you
feel any better, I am getting approximately 40 to 50 of these a day, while the
rest of my users, combined, have received no more than 20.
Sharyn
Title: Message
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Sharyn SchmidtSent: 29. september 2003
13:35To: [EMAIL PROTECTED]Subject: RE:
[Declude.Virus] Swen... Incredible..
Not a single person in the domains hosted on our
Not a single person in the domains hosted on our
server has received a single incident.
I am getting approximately 40 to 50 of these a day,
while the rest of my users, combined, have received
no more than 20.
From begin of this month on we've disabled recipient virus warnings
I can't catch emails with the virus "SWEN", I have
the last definitions in my
antivirus (virus scan command line), any
solution???
Thx!
I can't catch emails with the virus SWEN, I have the last definitions in my
antivirus (virus scan command line), any solution???
Are you running the latest version (.exe file) of your virus scanner? Some
virus scanners required an upgrade to the .exe file to catch Swen.
Does the SCANFILE line
17 matches
Mail list logo
