RE: [Declude.Virus] BitDefender updates
Thanks for your help Didn't notice that directory. I was looking the files in another directory it used to drop part of the installation I made. Excellent. I will test it as a second scanner. Luis Arango > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Jerry Murdock > Sent: Viernes, 27 de Mayo de 2005 09:14 a.m. > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] BitDefender updates > > Look under: > > \Program Files\Common Files\Softwin\BitDefender Scan Server > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting > S.A. Luis Alberto Arango > Sent: Friday, May 27, 2005 1:06 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] BitDefender updates > > Interesting post. Didn't know about this free version. > > Could you post the configuration setting for declude. > I found this in the archives > SCANFILE C:\Progra~1\Common~1\Softwin\BitDef~1\bdc.exe /f /a > /log=report.txt VIRUSCODE 1 REPORT Infected: > > It mentions bdc.exe > > I downloaded bitdefender_free_win_v72.exe, is this file the right > edition? > The free edition you are talking about? > > There is no bdc.exe. There is a bdlite.xe. Is this the right file to do > command scanners? I haven't been able to test it silently. When I test > it, the management console pops up. > > Luis Arango > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > > Sent: Jueves, 26 de Mayo de 2005 08:42 p.m. > > To: Declude.Virus@declude.com > > Subject: [Declude.Virus] BitDefender updates > > > > Since it appears that the free version of BitDefender works with > > Declude, how do you go about doing updates, as it appears there is no > > auto update for the free version. > > > > Also, is any one using the standard version and if so is the command > > line the same? > > > > John T > > eServices For You > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > > __ > > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > > [Email escaneado contra virus por Panda Consulting > > -www.pandacons.com-] > > > __ > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > __ > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] __ [Email scanned for viruses by Panda Consulting -www.pandacons.com-] [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] BitDefender updates
There updater is there, but like Jerry questioned does it require a user to be logged in? John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Jerry Murdock > Sent: Friday, May 27, 2005 7:11 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] BitDefender updates > > Have to admit this has been on my list of things to investigate as well. > > The auto-update is there, but looks to require the console logged in - > but have to admit I haven't looked hard. > > Any luck running the update as a service or via command line? > > Jerry > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman > Sent: Thursday, May 26, 2005 9:52 PM > To: John Tolmachoff (Lists) > Subject: Re: [Declude.Virus] BitDefender updates > > > Since it appears that the free version of BitDefender works with > > Declude, how do you go about doing updates, as it appears there is no > > auto update for the free version. > > There's a nice auto-updater in MY free version. :) Maybe you have the > wrong download. . . . > > --Sandy > > > > Sanford Whiteman, Chief Technologist > Broadleaf Systems, a division of > Cypress Integrated Systems, Inc. > e-mail: [EMAIL PROTECTED] > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] EXITSCANONVIRUS
Thanks. John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of David Franco-Rocha [ Declude ] > Sent: Friday, May 27, 2005 8:33 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] EXITSCANONVIRUS > > John, > > This setting defaults to OFF, which is the way it has been historically. The > only setting it actually looks for is ON. If you omit the directive > completely from your virus.cfg file, it will be OFF. > > Please note that the actual directive is EXITSCANONVIRUSDETECT ON > > David Franco-Rocha > Declude Technical Support > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Friday, May 27, 2005 11:17 AM > Subject: RE: [Declude.Virus] EXITSCANONVIRUS > > > Thanks. Is this a configurable meaning we have to have either ON or OFF? > > John T > eServices For You > > > -Original Message- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of David Franco-Rocha [ Declude ] > > Sent: Friday, May 27, 2005 7:21 AM > > To: Declude.Virus@declude.com > > Subject: Re: [Declude.Virus] EXITSCANONVIRUS > > > > John, > > > > There is a processing loop wherein all the scanners are called in > > succession. It is independent of vulnerability checking. This directive > > merely tells Declude to break out of the external virus scanner execution > > loop. If you use this directive to exit the scanning loop on virus > detection > > and (1) you have 5 scanners listed in your cfg file and (2) a virus is > > detected by the first scanner listed, then the effect is exactly the same > in > > processing as if you had a single scanner listed and a virus were detected > > by that single scanner. > > > > David Franco-Rocha > > Declude Technical Support > > > > - Original Message - > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > To: > > Sent: Friday, May 27, 2005 2:50 AM > > Subject: [Declude.Virus] EXITSCANONVIRUS > > > > > > A question about this new feature. > > > > Am I correct in thinking that as soon as a scanner reports a virus, the > next > > scanner(s) in line will not be called and the message will be processed > > accordingly, and that it will not be affected by Declude first finding a > > banned attachment before having it scanned by a scanner? > > > > John T > > eServices For You > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] EXITSCANONVIRUS
John, This setting defaults to OFF, which is the way it has been historically. The only setting it actually looks for is ON. If you omit the directive completely from your virus.cfg file, it will be OFF. Please note that the actual directive is EXITSCANONVIRUSDETECT ON David Franco-Rocha Declude Technical Support - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: Sent: Friday, May 27, 2005 11:17 AM Subject: RE: [Declude.Virus] EXITSCANONVIRUS Thanks. Is this a configurable meaning we have to have either ON or OFF? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ] Sent: Friday, May 27, 2005 7:21 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] EXITSCANONVIRUS John, There is a processing loop wherein all the scanners are called in succession. It is independent of vulnerability checking. This directive merely tells Declude to break out of the external virus scanner execution loop. If you use this directive to exit the scanning loop on virus detection and (1) you have 5 scanners listed in your cfg file and (2) a virus is detected by the first scanner listed, then the effect is exactly the same in processing as if you had a single scanner listed and a virus were detected by that single scanner. David Franco-Rocha Declude Technical Support - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: Sent: Friday, May 27, 2005 2:50 AM Subject: [Declude.Virus] EXITSCANONVIRUS A question about this new feature. Am I correct in thinking that as soon as a scanner reports a virus, the next scanner(s) in line will not be called and the message will be processed accordingly, and that it will not be affected by Declude first finding a banned attachment before having it scanned by a scanner? John T eServices For You --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] EXITSCANONVIRUS
Release notes indicate default is off. To use it, use: EXITSCANONVIRUSDETECT ON John C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, May 27, 2005 10:18 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] EXITSCANONVIRUS Thanks. Is this a configurable meaning we have to have either ON or OFF? John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of David Franco-Rocha [ Declude ] > Sent: Friday, May 27, 2005 7:21 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] EXITSCANONVIRUS > > John, > > There is a processing loop wherein all the scanners are called in > succession. It is independent of vulnerability checking. This > directive merely tells Declude to break out of the external virus > scanner execution loop. If you use this directive to exit the scanning > loop on virus detection > and (1) you have 5 scanners listed in your cfg file and (2) a virus is > detected by the first scanner listed, then the effect is exactly the > same in > processing as if you had a single scanner listed and a virus were > detected by that single scanner. > > David Franco-Rocha > Declude Technical Support > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Friday, May 27, 2005 2:50 AM > Subject: [Declude.Virus] EXITSCANONVIRUS > > > A question about this new feature. > > Am I correct in thinking that as soon as a scanner reports a virus, > the next > scanner(s) in line will not be called and the message will be > processed accordingly, and that it will not be affected by Declude > first finding a banned attachment before having it scanned by a scanner? > > John T > eServices For You > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] EXITSCANONVIRUS
Thanks. Is this a configurable meaning we have to have either ON or OFF? John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of David Franco-Rocha [ Declude ] > Sent: Friday, May 27, 2005 7:21 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] EXITSCANONVIRUS > > John, > > There is a processing loop wherein all the scanners are called in > succession. It is independent of vulnerability checking. This directive > merely tells Declude to break out of the external virus scanner execution > loop. If you use this directive to exit the scanning loop on virus detection > and (1) you have 5 scanners listed in your cfg file and (2) a virus is > detected by the first scanner listed, then the effect is exactly the same in > processing as if you had a single scanner listed and a virus were detected > by that single scanner. > > David Franco-Rocha > Declude Technical Support > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Friday, May 27, 2005 2:50 AM > Subject: [Declude.Virus] EXITSCANONVIRUS > > > A question about this new feature. > > Am I correct in thinking that as soon as a scanner reports a virus, the next > scanner(s) in line will not be called and the message will be processed > accordingly, and that it will not be affected by Declude first finding a > banned attachment before having it scanned by a scanner? > > John T > eServices For You > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Invalid ZIP Vulnerability
This vulnerability is triggered if the file format diverges from the official ZIP format specification. David Franco-Rocha Declude Technical Support - Original Message - From: "Paul Navarre" <[EMAIL PROTECTED]> To: Sent: Friday, May 27, 2005 1:54 AM Subject: [Declude.Virus] Invalid ZIP Vulnerability What exactly triggers the Invalid ZIP Vulnerability? I am a small ISP, and one of my client keeps getting expected zips from a graphics company caught by this. Thanks, Paul --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] EXITSCANONVIRUS
John, There is a processing loop wherein all the scanners are called in succession. It is independent of vulnerability checking. This directive merely tells Declude to break out of the external virus scanner execution loop. If you use this directive to exit the scanning loop on virus detection and (1) you have 5 scanners listed in your cfg file and (2) a virus is detected by the first scanner listed, then the effect is exactly the same in processing as if you had a single scanner listed and a virus were detected by that single scanner. David Franco-Rocha Declude Technical Support - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: Sent: Friday, May 27, 2005 2:50 AM Subject: [Declude.Virus] EXITSCANONVIRUS A question about this new feature. Am I correct in thinking that as soon as a scanner reports a virus, the next scanner(s) in line will not be called and the message will be processed accordingly, and that it will not be affected by Declude first finding a banned attachment before having it scanned by a scanner? John T eServices For You --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] BitDefender updates
Have to admit this has been on my list of things to investigate as well. The auto-update is there, but looks to require the console logged in - but have to admit I haven't looked hard. Any luck running the update as a service or via command line? Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, May 26, 2005 9:52 PM To: John Tolmachoff (Lists) Subject: Re: [Declude.Virus] BitDefender updates > Since it appears that the free version of BitDefender works with > Declude, how do you go about doing updates, as it appears there is no > auto update for the free version. There's a nice auto-updater in MY free version. :) Maybe you have the wrong download. . . . --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] BitDefender updates
Look under: \Program Files\Common Files\Softwin\BitDefender Scan Server -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Friday, May 27, 2005 1:06 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] BitDefender updates Interesting post. Didn't know about this free version. Could you post the configuration setting for declude. I found this in the archives SCANFILE C:\Progra~1\Common~1\Softwin\BitDef~1\bdc.exe /f /a /log=report.txt VIRUSCODE 1 REPORT Infected: It mentions bdc.exe I downloaded bitdefender_free_win_v72.exe, is this file the right edition? The free edition you are talking about? There is no bdc.exe. There is a bdlite.xe. Is this the right file to do command scanners? I haven't been able to test it silently. When I test it, the management console pops up. Luis Arango > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > Sent: Jueves, 26 de Mayo de 2005 08:42 p.m. > To: Declude.Virus@declude.com > Subject: [Declude.Virus] BitDefender updates > > Since it appears that the free version of BitDefender works with > Declude, how do you go about doing updates, as it appears there is no > auto update for the free version. > > Also, is any one using the standard version and if so is the command > line the same? > > John T > eServices For You > > > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > __ > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > [Email escaneado contra virus por Panda Consulting > -www.pandacons.com-] __ [Email scanned for viruses by Panda Consulting -www.pandacons.com-] [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Invalid ZIP Vulnerability
I've seen it here rarely also. Not positive here but here is a theory: The zip file may gave been created on a Mac and contain some Mac specific size 0 files? - Original Message - From: "Paul Navarre" <[EMAIL PROTECTED]> To: Sent: Friday, May 27, 2005 12:54 AM Subject: [Declude.Virus] Invalid ZIP Vulnerability What exactly triggers the Invalid ZIP Vulnerability? I am a small ISP, and one of my client keeps getting expected zips from a graphics company caught by this. Thanks, Paul --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
