[Declude.Virus] problems with the F-Prot updater
Is any one else having problems getting updates from the f-prot site? I get a runtime error from the updater program, and when I go to the website to download the updates, I get a page can not be found. Bruce --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] What is "Partial Vulnerability" on a PDF
Was there ever a way to put these emails back together? I had some one send me pictures that got broken up by this, and was wondering if they could be re-assembled. Bruce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic Sent: Thursday, June 03, 2004 4:26 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] What is "Partial Vulnerability" on a PDF Yes I looked again and you are right. So Declude would have to keep track of e-mail to e-mail and possible out of sequence and different clients marking the split stuff in different ways On/Off switch is the way to go (unfortunately) Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > Sent: Thursday, June 03, 2004 4:05 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] What is "Partial Vulnerability" on a PDF > > I think the problem is, that while the extension may show up in one of the > 5, it would not be in all 5 and therefore not an accurate test. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of Goran Jovanovic > > Sent: Thursday, June 03, 2004 12:37 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] What is "Partial Vulnerability" on a PDF > > > > > > I guess it would be nice to say > > > > BANPARTIAL EXE > > BANPARTIAL COM > > BANPARTIAL VBS > > > > Etc > > > > I don't think a PDF can be infected but then again you never know so > > maybe . > > > > In any case it is almost a damned if you do damned if you don't > > > > Thanx > > > > > > Goran Jovanovic > > The LAN Shoppe > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > > [EMAIL PROTECTED] On Behalf Of Matt > > > Sent: Thursday, June 03, 2004 3:28 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.Virus] What is "Partial Vulnerability" on a PDF > > > > > > Goran, > > > > > > Outlook/Outlook Express allows a sender to split messages over a > > certain > > > size into multiple attachments. Messages of this type can bypass > > virus > > > scanning and therefore represent a vulnerability. I have however > > > personally determined that because it is so easy to turn on, and > > because > > > I have yet to find any viruses that are currently exploiting this > > flaw, > > > that it is better to leave it off for now rather than comb over my > > hold > > > file looking for such messages and alerting those that are set up for > > > this. Scott does provide a stitch for your Virus.cfg that can turn > > this > > > off with the following: > > > > > > BANPARTIALOFF > > > > > > I don't feel that this is a "set it and forget it" type of setting, so > > > use at your own risk, and keep your eyes and ears pealed for exploits > > in > > > the event that a virus does start exploiting the flaw. Thankfully the > > > trickery has gone down since the arrested that German teenager :) > > > > > > Matt > > > > > > > > > > > > Goran Jovanovic wrote: > > > > > > >Declude Virus and F-Prot reported > > > > > > > >X-Declude-Virus: Detected [Partial Vulnerability]. > > > > > > > >This is an e-mail that has been cut into 5 part and it has a PDF > > > >attached to it. > > > > > > > >--=_NextPart_000_0019_01C4494C.0AFFE0A0 > > > >Content-Type: application/octet-stream; > > > > name="Report.pdf" > > > >Content-Transfer-Encoding: base64 > > > >Content-Disposition: attachment; > > > > filename="Report.pdf" > > > > > > > >We stopped the 5 e-mails but why would it have triggered on a PDF > > file? > > > > > > > >Also how does the client out the PDF back together??? > > > > > > > >Thanx > > > > > > > > > > > > Goran Jovanovic > > > > The LAN Shoppe > > > > > > > >--- > > > >[This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > > >--- > > > >This E-mail came from the Declude.Virus mailing list. To > > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > >type "unsubscribe Declude.Virus".The archives can be found > > > >at http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > > > > > -- > > > > > = > > > MailPure custom filters for Declude JunkMail Pro. > > > http://www.mailpure.com/software/ > > > > > = > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus".The archives can be found > > > at http://www.mail-archive.com. > > > --- > > > [This E-mail scanned for viruses by Declude Virus] > > > > > > --- >
[Declude.Virus] anybody still here?
I have not seen anything since Monday am? Is it just this slow? Bruce --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] strange emails
I am getting a bunch of emails with the subject: Fwd: FW: Fellow Americans and a bunch of text (that went around a while ago), but no attachments that I can see. They are all coming from the same mail server, and I contacted them, and they seem to think they have a virus, but I can't find anything about this. I told them I would see what I can find out. Any one else seen this? Bruce AFM --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Sober.z
Has any one else noticed that sober.z just stopped today? I was getting hundreds a day and now I have 0. Wasn't this the day it was to morph? Bruce L. AFM --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Sober.z
that was my fear... but so far we are still ok. No sober.z virus, and I have not seen a new variant either. (my old mail server needed this break!) Bruce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tim Collins (Home) Sent: Saturday, January 07, 2006 7:54 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Sober.z I see the same results as Bruce. On Jan 5th I had 450 hits of Sober.z. On Jan 6th I had ZERO. I'm using Fprot and have not upgraded recently... Nothing to do with the version. Maybe the calm before the storm? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J Porter Sent: Friday, January 06, 2006 9:53 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Sober.z Yep... I upgraded to FProt 3.16e and noticed the slowdown. I thought it was a problem with that version, so I upgraded to the 3.16f which was released today. Still no Sober viruses caught. I'm still wondering if I should go back to 3.16d. Anyone seeing Sober caught with these last 2 updates of F-Prot?? ~Joe - Original Message ----- From: "Bruce Loughlin" <[EMAIL PROTECTED]> To: Sent: Friday, January 06, 2006 10:03 AM Subject: [Declude.Virus] Sober.z > Has any one else noticed that sober.z just stopped today? > > I was getting hundreds a day and now I have 0. > Wasn't this the day it was to morph? > > Bruce L. > AFM > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses at HNB.com] > > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] new virus
Is anyone else seeing new virus zip files getting past F-Prot? the last one was just numbers.zip Earlier a few came through with name.zip Bruce Loughlin ---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.
[Declude.Virus] automated response
I will be on vacation from October 9th till October 16th. I will return all messages on Monday the 19th. Thanks, Bruce --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] automated response
I will be out on vacation starting April 5th returning to work April 12th. If you should have any problems,questions or concerns you may reach Roger Mellor at: 407-296-2911. rmel...@afm-fla.com --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT fprot virus update
Is it possible to just copy the unzipped virus definition files to the fprot directory, instead of using the windows update program? I have a very old computer I installed fprot on, and it will not use the windows update program. I think the Internet Explorer program is too old, and all I want is the virus scanner to work. I don't mind doing the copy/update to it. Thanks, Bruce Loughlin Allstate Food Marketing --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Outlook Calendars and declude virus
I have recently found that new Outlook web calendars are not working properly for my email users. When I thought back, it seems like it happened when I added Declude Virus to the server that they may have stopped working. Could it be declude opening the email to add the tagline, scanned by etc., that may be affecting this? Outlook does say to make sure mail is being sent in rich text format when you set up accounts. Any ideas? Thanks, Bruce Loughlin --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Outlook Calendars and declude virus
Thanks Scott, that was what I thought it may be. And to disable the footer message I would just delete the lines in virus.cfg??? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, January 13, 2003 3:07 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Outlook Calendars and declude virus >I have recently found that new Outlook web calendars are not working >properly for my email users. When I thought back, it seems like it happened >when I added Declude Virus to the server that they may have stopped working. >Could it be declude opening the email to add the tagline, scanned by etc., >that may be affecting this? There is an issue with Outlook web calendaring where it may choke on the footer that Declude Virus adds. Specifically, it expects the content of the E-mail to be identical to what it sent, and it will break if headers/footers are added. The only way to get around this is to disable the footer. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
