AW: [Declude.Virus] New computer virus can infect picture files

2002-06-14 Thread Markus
New computer virus can infect picture files http://vil.nai.com/vil/content/v_99522.htm ... Am I missing something? On the NAI Virus information library I can read McAfee products running the 4185 DATs (or greater) with program heuristics enabled, detect... Ont the

Re: [Declude.Virus] New computer virus can infect picture files

2002-06-14 Thread R. Scott Perry
This just sucks! http://vil.nai.com/vil/content/v_99522.htm New computer virus can infect picture files This sounds like just a scare tactic, and until more information can be provided, should be treated as such. Data is just data, and can NOT normally contain a virus. Cases where it

[Declude.Virus] F-PROT not catching W32/KLEZ.mm

2002-06-14 Thread VPNetwork
When I run a virus scan of mailboxes the scan is reporting this virus infecting the mailboxes. Why are these getting through and why is it F-PROT won t delete the infected file when cleaning fails. The setting we have are for the file to be deleted if disinfect fails. Is there a setting I

Re: [Declude.Virus] F-PROT not catching W32/KLEZ.mm

2002-06-14 Thread R. Scott Perry
When I run a virus scan of mailboxes the scan is reporting this virus infecting the mailboxes. Why are these getting through ... To find out why, you'll need to open one of those mailboxes with a text editor, such as Notepad (it is safe to open them with a text editor). You'll need to check

RE: [Declude.Virus] New computer virus can infect picture files

2002-06-14 Thread Jeff Kratka
Is it wise to turn on scanning for .jpg files then or is more of a waste of time. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED]

[Declude.Virus] KITHRUP:MIS number

2002-06-14 Thread Jim Rooth
What tag do I need to add to postmaster.eml that will show the MIS number? I have a client who is deluged by Klez but cannot find which computers are affected. Their computers were swapped out during a lay off by their employees and unfortunately, the email programs are still running on some of

RE: [Declude.Virus] New computer virus can infect picture files

2002-06-14 Thread R. Scott Perry
Is it wise to turn on scanning for .jpg files then or is more of a waste of time. Until McAfee's wild claim can be confirmed, I don't see the need to turn on scanning for .jpg files. -Scott --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.Virus] KITHRUP:MIS number

2002-06-14 Thread R. Scott Perry
What tag do I need to add to postmaster.eml that will show the MIS number? I have a client who is deluged by Klez but cannot find which computers are affected. Their computers were swapped out during a lay off by their employees and unfortunately, the email programs are still running on some

RE: [Declude.Virus] KITHRUP:MIS number

2002-06-14 Thread Jim Rooth
I have them included but the MIS is not coming through. I just got through checking the log file in IMAIL and I doubt the MIS would be helpfulmost of the ones with virus have been modified to reflect alpha instead of numeric. i.e. MIS lkrhf Sneaky devils, aren't they! Jim Rooth

[Declude.Virus] NJABL:Declude/MaCaphee combo not catching virus

2002-06-14 Thread Dan Olsen \( DANO \)
I have declude/MaCaphee loaded, below is the declude cfg file. My setup is missing Klez virus and few others. I manualy scanned the spool and user directories this AM and found 36 virus. 1100 users. Anyhelp or ideas would be greatly appreciated. DANO ## Declude Virus configuration

Re: [Declude.Virus] NJABL:Declude/MaCaphee combo not catchingvirus

2002-06-14 Thread R. Scott Perry
SCANFILEC:\progra~1\networ~2\comman~1\Scan.exe /ALL /NOMEM /NOBOOT /SILENT /UNZIP VIRUSCODE 13 Maybe I'm crazy but doesn't the scanner need to have a parameter for a log file? That's only used so that Declude Virus can get the name of the virus that was detected. Without the

[Declude.Virus] Virus removal

2002-06-14 Thread Jim Rooth
Declude and F-Prot are doing a great job...when I don't mess with them! Question though is when I scan the server I find something like 138 instances of virus (viri) on the server in archived locations. I wonder how one goes about removing them? I have been literally removing the users and

RE: [Declude.Virus] Virus removal

2002-06-14 Thread Jim Rooth
I believe most of them are in the IMAIL\Spool directory. I am running a fresh scan to verify that. Jim Rooth -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, June 14, 2002 2:26 PM To: [EMAIL PROTECTED] Subject: Re: