I have this in recip.eml
SKIPIFVIRUSNAMEHAS Klez
SKIPIFVIRUSNAMEHAS Bugbear
but it still sends out the mail why and what to do ?
Med vennlig hilsen
Benny Samuelsen
ISPhuset Visual Web Norge Da
tlf +47 32 26 02 00
fax +47 32 81 13 55
http://isphuset.info / http://isphuset.no
---
[This
yes and its working on 100 % of klez and 99 % of bugbear but some still slips by...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 11. oktober 2002 14:10
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] SKIPIFVIRUSNAME
I'm sure you've handed out the info b4, but can you point me to the info on
FORGINGVIRUS option?
TY
Andrew
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 11, 2002 8:11 AM
Subject: Re: [Declude.Virus] forged, what would that mean?
here's a copy of my latest virus alert, I've never seen [forged] before, I
have relay turned off.
The Klez virus forges the return address, that's all that means. The
[Forged] is used in conjunction with the FORGINGVIRUS option, so that
you won't get mad at the person who apparently sent you
I have this in recip.eml
SKIPIFVIRUSNAMEHAS Klez
SKIPIFVIRUSNAMEHAS Bugbear
but it still sends out the mail why and what to do ?
Are you running Declude v1.47 or later (you can type \IMail\Declude -diag
from a command prompt, exactly like that, to find out)?
The catch with the
I mean the message is sent to the recipient i a few cases like this
Date: Thu, 10 Oct 2002 21:09:53 +0200
Message-Id: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
From: hostmaster [EMAIL PROTECTED]
Reply-To: [EMAIL
I mean the message is sent to the recipient i a few cases like this
Normally, people have the recipient receive the notifications for all
viruses. Does your recip.eml file have the SKIPIFVIRUSNAMEHAS Bugbear in
it (on a line by itself, only once space/tab in it, before the first blank
Just upgraded from F-Prot 3.12a to 3.12b, after which my virus logs show :
10/11/2002 12:30:48 Qfcb815c MIME file: [text/html][7bit; Length=6601
Checksum=546749]
10/11/2002 12:30:48 Qfcb815c 1 [1 of 2 not deleted] files were deleted. Use
ONACCESS ON if you use an external (on access) virus
Just upgraded from F-Prot 3.12a to 3.12b, after which my virus logs show :
10/11/2002 12:30:48 Qfcb815c 1 [1 of 2 not deleted] files were deleted. Use
ONACCESS ON if you use an external (on access) virus scanner.
SCANFILE
:\Progra~1\FSI\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -DUMB
Excellent. That did the trick.
Just another fat-finger error on my part.
Thanks,
Douglas
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, October 11, 2002 12:46 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] F-Prot
Hi Scott:
I found a declude.log file in c:\
I opened it and found a lot of strange logs... look at this
10/08/2002 18:56:07 Q708602ed01947d88 Couldn't move/copy data file [32].
Priority back to 32.
10/08/2002 18:56:21 Q708602ed01947d88 WARNING: Could not unlock file due to
error #2.
10/08/2002
I found a declude.log file in c:\
10/11/2002 08:47:47 Qd639018701eabfb6 WARNING: Could not unlock file due
to error #2.
10/11/2002 11:54:33 Q022c2aa001406c90 Couldn't move/copy data file [32].
Priority back to 32.
The Couldn't move/copy data file [32] indicates a sharing violation, and
the
Sorry if I missed the discussion on this one, but..
I noticed that some people are using hyphens with the command line
arguments (-type) and some (like me) use slash (/type). I am using
3.12b. Are these interchangeable?
Thanks,
John
R. Scott Perry wrote:
Just upgraded from F-Prot 3.12a to
Sorry if I missed the discussion on this one, but..
I noticed that some people are using hyphens with the command line
arguments (-type) and some (like me) use slash (/type). I am using
3.12b. Are these interchangeable?
Good question!
I've heard that fpcmd.exe has to use -, but I've also
14 matches
Mail list logo
