Re: [Declude.Virus] new interim version

2004-10-01 Thread Bennie
And where do you find these on the website??? I have been looking and cant seem to find them anywhere Bennie - Original Message - From: Peter Lowish [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 30, 2004 7:52 PM Subject: [Declude.Virus] new interim version I note

RE: [Declude.Virus] new interim version

2004-10-01 Thread Kami Razvan
Bennie: Look at Scott's email: Yes. v1.80 has basic (Microsoft method) detection of the GDIPlus.dll JPEG Exploit, but their way has false positives. The v1.80i1 interim at http://www.declude.com/version/interim (and likely tomorrow a 1.81 release) has full (Declude method) detection of the

Re: [Declude.Virus] new interim version

2004-10-01 Thread Kevin Rogers
Newb question: How do I install an interim version of Declude? Just replace the declude.exe file? Thanks Kevin Kami Razvan wrote: Bennie: Look at Scott's email: Yes. v1.80 has basic (Microsoft method) detection of the GDIPlus.dll JPEG Exploit, but their way has false positives. The v1.80i1

Re: [Declude.Virus] new interim version

2004-10-01 Thread R. Scott Perry
How do I install an interim version of Declude? Just replace the declude.exe file? That is correct. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection

[Declude.Virus] F-Prot 3.15b break Declude Virus?

2004-10-01 Thread Don Brown
I read the thread about this, but I didn't determine the final conclusion. Does F-Prot 3.15b break Declude virus? Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 ---

Re: [Declude.Virus] F-Prot 3.15b break Declude Virus?

2004-10-01 Thread R. Scott Perry
I read the thread about this, but I didn't determine the final conclusion. Does F-Prot 3.15b break Declude virus? I'm not aware of it breaking Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers

RE: [Declude.Virus] F-Prot 3.15b break Declude Virus?

2004-10-01 Thread Kami Razvan
We have been on B version for 2 weeks or so- no problems here. We use 3 scanners: F-Prot, AVG, and McAfee- all are working like one big happy family. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, October 01, 2004

[Declude.Virus] More CPL Vulnerabilities

2004-10-01 Thread Bob McGregor
Since upgrading to 1.80 I am seeing many more Invalid CPL Vulnerabilities. Is this just timing or is there something different for these vulnerabilities? The interesting thing about these is that they are coming from spoofed senders multiple deliveries at a time. --- [This E-mail was scanned

Re: [Declude.Virus] More CPL Vulnerabilities

2004-10-01 Thread R. Scott Perry
Since upgrading to 1.80 I am seeing many more Invalid CPL Vulnerabilities. Is this just timing or is there something different for these vulnerabilities? The interesting thing about these is that they are coming from spoofed senders multiple deliveries at a time. The Invalid CPL Vulnerability

[Declude.Virus] Deleting Vulnerability

2004-10-01 Thread John Carter
Now that 1.80 does not delete vulnerabilities even with DELETEVIRUSES ON, what is the best way of deleting them? Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send

Re: [Declude.Virus] More CPL Vulnerabilities

2004-10-01 Thread Bob McGregor
strange since I had the interim versions, many of them. I do not remember seeing this vulnerability especially being spoofed. I wonder though: I added a vulnerability.eml and have ONLYSENDIFVIRUSNAMEHAS JPEG Vulnerability I assumed that the virusname would have to have JPEG Vulnerability, both

Re: [Declude.Virus] More CPL Vulnerabilities

2004-10-01 Thread R. Scott Perry
I wonder though: I added a vulnerability.eml and have ONLYSENDIFVIRUSNAMEHAS JPEG Vulnerability I assumed that the virusname would have to have JPEG Vulnerability, both words, is this the case? Correct. -Scott --- Declude JunkMail: The advanced

RE: [Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Andy Schmidt
Title: Message Hi, there is a slight error on the "download" page for your registered customers: Both "down" arrow buttons link to the "automatic install" executable. Only the "manual install" TEXT link actually downloads the zip file. Use of Version 1.81 requires a Valid Service

RE: [Declude.Virus] Deleting Vulnerability

2004-10-01 Thread Douglas Cohn
You can run a scheduled task that deletes the contents of the virus folder every x minutes, hours, days. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Friday, October 01, 2004 11:02 AM To: [EMAIL PROTECTED] Subject:

Re: [Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Jim Matuska
Title: Message I didn't even try the graphic links,didn't evenknow they were links,but after Andy's email I checked the page and for me indeed the graphics both pointed to the full installer link Andy's email said. Jim Matuska Jr.Computer Tech IICCNANez Perce TribeInformation Systems[EMAIL

Re: [Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Darin Cox
Title: Message Actually, this rebuttal is not true. The graphic links do indeed both link to the full installer. Darin. - Original Message - From: Douglas Cohn To: [EMAIL PROTECTED] Sent: Friday, October 01, 2004 6:15 PM Subject: RE: [Declude.Virus] Declude Release 1.81 - Error on

RE: [Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Douglas Cohn
Title: Message I am sorry. I misunderstood Graphic/text. I now see the graphic is the ARROW which I never attempted to click at all. So when I said it works for me I was referring to the Text which for some dumb reason I took as graphic. (yes it's text). Both arrows definitely link to

RE: [Declude.Virus] Lines in the virus.cfg file

2004-10-01 Thread Douglas Cohn
Now that 1.81 is released what is the recommendation by DECLUDE (SCOTT) regarding the config file.?? IE do we allow the AV software to scan jpegs by removing the line SKIPEXT JPG or do we allow Declude to take care of it completely . From what I understand (and I know ugotz) the

RE: [Declude.Virus] Lines in the virus.cfg file

2004-10-01 Thread R. Scott Perry
Now that 1.81 is released what is the recommendation by DECLUDE (SCOTT) regarding the config file.?? IE do we allow the AV software to scan jpegs by removing the line SKIPEXT JPG or do we allow Declude to take care of it completely . That's up to you. In theory, it shouldn't be

CBL:RE: [Declude.Virus] Deleting Vulnerability

2004-10-01 Thread Markus Gufler
Now that 1.80 does not delete vulnerabilities even with DELETEVIRUSES ON, what is the best way of deleting them? You can try out www.zcom.it/decludeupdater/ictcleaner.zip It's small, easy to use and freeware. Markus --- [This E-mail was scanned for viruses by Declude Virus

[Declude.Virus] Another easy one

2004-10-01 Thread Kevin Rogers
I'm getting an error in my vXXX.log file: 10/01/2004 13:46:27 Qc22200bc00b6e28c Couldn't find console; starting... (2). 10/01/2004 13:46:27 Qc22200bc00b6e28c Error starting deccon.exe: 2 10/01/2004 13:46:27 Qc22200bc00b6e28c Scanned: Virus Free [MIME: 2 2058] 10/01/2004 13:46:49 Qc23200bf00b6e28e

Re: [Declude.Virus] Another easy one

2004-10-01 Thread R. Scott Perry
I'm getting an error in my vXXX.log file: 10/01/2004 13:46:27 Qc22200bc00b6e28c Couldn't find console; starting... (2). 10/01/2004 13:46:27 Qc22200bc00b6e28c Error starting deccon.exe: 2 This one is because you have a line CONSOLE ON in the virus.cfg file, which tells Declude to run the

Re: [Declude.Virus] Another easy one

2004-10-01 Thread Kevin Rogers
I didn't have anything after the LOGFILE and LOGLEVEL (no mention of CONSOLE at all). So I've added a CONSOLE OFF line after that. I don't have Hijack, so I assume this is the way to get around the error? Kevin Rogers wrote: I don't appear to have any string CONSOLE ON in my virus.cfg

Re: [Declude.Virus] Another easy one

2004-10-01 Thread R. Scott Perry
I didn't have anything after the LOGFILE and LOGLEVEL (no mention of CONSOLE at all). So I've added a CONSOLE OFF line after that. I don't have Hijack, so I assume this is the way to get around the error? Do you have a CONSOLE ON line in your global.cfg file? It's possible that that could

Re: [Declude.Virus] Another easy one

2004-10-01 Thread Kevin Rogers
Just so you know. There wasn't a CONSOLE anything in either the two files: global.cfg or virus.cfg. When I got the 1.81 upgrade, deccon.exe was put into my new Upgrade 1.81 directory, so I decided to put it in the /Imail directory, and now everything is hunky-dorey. But nonetheless, there

[Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Andy Schmidt
Title: Message Ouch - even worse, note that the GRAPHICAL buttons link to version 1.80 - only the text buttons link to Version 1.81! Seems like someone was in a rush? Everyone better check what they downloaded - if you clicked on the graphics, you are running a BAD release. TR TD