Well, the morning was lucky, at aboutnoon the
viruses startedflowing inagain at about noon PST.
Jim Matuska Jr.Nez Perce TribeComputer
Services[EMAIL PROTECTED]
- Original Message -
From:
David
Daniels
To: [EMAIL PROTECTED]
Sent: Wednesday, September 19, 2001 1:39
try
virlist.txt at the end of your command line (or whatever filename you
like)
Jim Matuska Jr.
Nez Perce Tribe
Computer Services
[EMAIL PROTECTED]
- Original Message -
From: Bill Beach [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 31, 2001 12:59 PM
Subject
the
update feature automatically. Has anyone else had this problem, or have any
ideas for a solution.
Jim Matuska Jr.
Nez Perce Tribe
Computer Services
[EMAIL PROTECTED]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
The latest update for Fprot is catching Goner-A. I put the update in place
about an hour ago and so far have caught about 30 copies of the virus.
Jim Matuska Jr.
Nez Perce Tribe
Computer Services
[EMAIL PROTECTED]
- Original Message -
From: Dean Zingle, Ipswitch.ca [EMAIL PROTECTED
I personally have not had any trouble running the betas, I seem to remember
one being recalled a while back though.
Jim Matuska Jr.
Nez Perce Tribe
Computer Services
[EMAIL PROTECTED]
- Original Message -
From: John Carter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, December 07
into all sorts of problems including web messaging not going past the login
screen, and finally progressing to the service stopping and not being able
to restart it.
Jim Matuska
Nez Perce Tribe
Information Systems
- Original Message -
From: John Tolmachoff [EMAIL PROTECTED]
To: [EMAIL
as undeliverable to the postmaster account.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Paul Ingram [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 25, 2002 7:27 AM
Subject: RE: [Declude.Virus] Another virus to skip notify
could
make declude send the bounce messages directly bypassing Imail completely,
and then just send them once, that way server resources wouldn't be tied up
trying to send them multiple times throughout the day and then declude could
just ignore the bounced bounce messages.
Jim Matuska Jr.
Nez
it. Is this
a new virus? I usually check out info at www.sarc.com but they don't even have it
listed. So far only one copy has been seen. Has anyone seen this one
or have a good link for information on this particular
virus?
Jim Matuska Jr.Nez Perce TribeInformation
Systems[EMAIL PROTECTED]
another
file.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, May 14, 2002 11:38 AM
Subject: Re: [Declude.Virus] W97M/Hopper.G Virus Information??
Does anyone know anything
thoughts?
Jim Matuska Jr.Nez Perce TribeInformation
Systems[EMAIL PROTECTED]
.
Luckily this time this wasn't a virus, but still strange.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: John Tolmachoff [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 04, 2002 11:56 AM
Subject: RE: [Declude.Virus] .shs
You could always setup terminal services or another remote access terminal
program on your server too.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: John Shacklett [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 22, 2002 8
We are running the Windows version with the built in updater set for 4 hour
updates, no problems, just have to remember to leave the server logged in or
the updates don't work.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: John Carter
anyway.
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Lynn Ritchie [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, December 12, 2002 10:18 AM
Subject: Re: [Declude.Virus] F-Prot version
John Tolmachoff wrote:
... just have
Wouldn't that first statement about the license key not be a problem since
the key is specific to the mailserver that is it is run on and could not be
reused unless you used the domain and server name that the keycode was
originally for?
Jim Matuska Jr.
Nez Perce Tribe
Information Systems
[EMAIL
, especially since it seems to be forging an address from our own
domain. Does anyone have any idea when F-Prot will get definitions for this
one?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus
of declude and imail are you running? You may want to try a newer
version of declude to see if that changes anything.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: ISPhuset Nordic AS [EMAIL PROTECTED]
To: [EMAIL
Are you running the same versions of Imail and declude on each server, I
seem to remember something a while back about needing a later version of
Imail or Declude to catch webmail based virus attachments.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED
to delete them?
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
Is there a way to automate purging of the virus hold directory? Scott, What
about putting an option like that in declude to set a storage timeframe for
intercepted viruses?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message
them, however if I set Norton to exclude the Imail directory
will I have any problems? What do you think? Has anyone setup
anything similar?
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
?
It looks like it was only started to be detected by Symantec's Virus
definitions in yesterdays update and that is the only reason our user
initially picked it up. Does anyone know if this virus even spreads via
email?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL
the ip for that site is 66.216.74.58. Just be aware if you block
the ip address of that server and it later changes your acl will no longer
apply, the same thing with the message subject blocking, if it changes your
filters will not longer work.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce
and thus it is a
vulnerability. Have the guy check his email settings for a spot that says
break attachments over a certain size and disable that feature and it should go
through ok.
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
- Original
Just submit the file to Symantec and they should be able to tell you within
a couple hours if it is dangerous or not.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Jeff Maze - Hostmaster [EMAIL PROTECTED]
To: [EMAIL
F-prot just had an update too, waiting to see if we catch any.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, January 26, 2004 2:06 PM
Subject: RE
So much for the latest update from F-Prot, it does not pick up the new
virus, I just received one a few seconds ago, failed spam headers but made
it right through virus.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
---
[This E-mail was scanned
F-Prot just released new Definitions that pick up W32/[EMAIL PROTECTED] as well.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, January 26, 2004 2:06
release?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Jim Matuska [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, January 26, 2004 2:33 PM
Subject: Re: [Declude.Virus] New, fast-spreading virus: MyDoom
F-Prot
If indeed these password protected zips are not
being picked up by virus scanners, Scott can you add a feature to declude
antivirus or junkmail that could check for passwords on zip files and if they
exist block them. Is this doable?
Jim Matuska Jr.Computer Tech IICCNANez
Perce
I am seeing this same thing, it seems that the test virus email does not get
delivered but does not generate any notification message like the other
vulnerabilities do.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From
You can schedule the standard F-Prot Updater via the windows scheduler
without issue too.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, April
Are there any issues with usingversion 8.1
with Declude? I am thinking of upgrading our servers to 8.1. We are
running declude 1.79. Any thoughts?
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
with aol and earthlink servers? Any
thoughts?
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
Has anyone seen any new viruses that are using a
.cpl extension? I just received a 24k .cpl attachment that was not picked
up by declude with F-Prot or my local virus scanner. Any thoughts, also
Scott, would you like a copy to your virustrap account for
analysis?
Jim Matuska Jr.Computer
We have our own DNS servers and are providing reverse entries. Our primary
email server is enterprise.nezperce.org Is there anything in that which AOL
would block?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Stan
a
registered IP address and reverse entry.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Ncl Admin [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 9:42 AM
Subject: Re: [Declude.Virus] OT Problems
the scanners, but the attachment is actually a html file from
McAfee Antivirus saying it has removed the original attachment. This is a
fine example of why A. You should not send out notifications for forging
viruses and B. Don't send notifications that look just like the original
virus.
Jim
recommended file extension to ban.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list
though, it looked to me that F-Prot just changed their updater not to check
for engine updates.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Dan Horne [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 06, 2004 7
I've run into these as well, same symptoms, double zip file, lots of spaces
.scr files. F-Prot with latest defs don't catch it, but am picking up other
copies of MyDoom.O.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message
will pick them up on the
primary server when they get there. If you are having accounts on the
backup server and have users check mail direct from the backup as far as I know
you would need a second license for declude.
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL
Title: Message
I would assume you would need a second license for
that server. Also be aware some viruses may go directly to your backup
server as some will lookup the mx numbers and intentionally try to route through
the backup server.
Jim Matuska Jr.Computer Tech IICCNANez
Perce
though we have been a customer for many years, then having to read
documentation to figure out which version (automated, or manual), would be
preferred to download (what about providing a 3rd old school exe only
version.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
Be careful if you don't uncheck the use directory option in winzip you will
create a Files directory in the imail directory with the declude.exe file
rather than overwriting the declude.exe file in the imail root directory
when you unzip the file.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez
Scott,
Any idea on ETA for the new algorithm? Also, will this be an interim,
release, or beta?
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday
Title: Message
I didn't even try the graphic links,didn't
evenknow they were links,but after Andy's email I checked the page
and for me indeed the graphics both pointed to the full installer link Andy's
email said.
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL
customers $12,000 to upgrade 2 imail servers just because Imail is forcing
us to doesn't make much sense.
What about next year, I would almost bet that the service contract renewals
will be higher than they were with regular Imail??
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
don't see how we are going to be able to use declude no matter
what choice we make.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Matt Robertson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 9
to migrate
to another platform.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 10:45 AM
Subject: RE: Ipswitch Service Agreement Status [T2004102601WC
I seem to recall someone on this list mentioning
something about a upcoming declude version for Exchange? Any truth to this
rumor?
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
and I've cleared out my
1000 messages from the Imail Forum, so I can't resist...
Isn't Declude for Exchange part of the
soon-to-be-announced Declude Collaboration Suite (DCS)? ;) or is it :(
?
- Original Message -
From:
Jim Matuska
To: [EMAIL PROTECTED
their announcements re
the collaboration suite, what is everyone else doing in regard to this? I
am still up in the air here, but leaning further and further away from
IPswitch I think.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From
that email today from Ipswitch I didn't know what the renewal costs were
going to be for the new product (it took them a week to get that response to
me too). I'll have to check out those other products you mentioned in your
email.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
actually reported the message causing their PC to reboot. Any else
seen these.
Jim Matuska Jr.Computer Tech IICCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
Caught it without any issues whatsoever.
Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: David Sullivan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 11:35 AM
Subject: [Declude.Virus
and manage.
Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Daniel Ivey [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, May 02, 2005 6:52 AM
Subject: [Declude.Virus] f-prot update script
Does anyone have an f
the whole array fail, 1 drive just goes down and I replace it.
Perhaps for the best performance and to avoid a bad lot you would be better off
buying 2 drives of the same model and brand but buy them from 2 different
vendors so you get 2 different lots.
Jim Matuska Jr.Computer Tech2, CCNANez
We keep our server rooms (and our office) around
65-70degrees. I am usually wearing a sweatshirt and a heavy coat
year round.
Jim Matuska Jr.Computer Tech2, CCNANez
Perce TribeInformation Systems[EMAIL PROTECTED]
- Original Message -
From:
Doug
Traylor
60 matches
Mail list logo