RE: [Declude.Virus] 8.11 possible problem
Nothing looks wrong, I've just had that one instance of a .cpl making it through (and it was, of course, virus-laden). Do you have the Declude Virus log file entries for the E-mail? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 8.11 possible problem
Unfortunately, no. I'm not able to identify which e-mail it was - McAfee or human error (I actually believe McAfee) blew the e-mail away. In that case, I can't think of anything that you can do to track down what happened. Without the E-mail that got through or log file entries to work with, I can come up with some possible scenarios as to what happened, but it probably wouldn't even be possible to prove or disprove any of them. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 8.11 possible problem
Create a txt file, rename to cpl, then send to your self. It should be in the spool\virus folder. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Monday, May 03, 2004 5:34 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] 8.11 possible problem Ah, if were that easy. It actually went to a support e-mail box, which gets dozens of emails a minute sometimes, under all sorts of different aliases. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 8.11 possible problem
Make sure Imail didn't reset the Delivery Application. Imail Administrator Click Localhost Services SMTP Advanced Should be Declude.exe in the Imail directory (ex. C:\Imail\Declude.exe) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, May 03, 2004 7:46 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] 8.11 possible problem Create a txt file, rename to cpl, then send to your self. It should be in the spool\virus folder. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Monday, May 03, 2004 5:34 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] 8.11 possible problem Ah, if were that easy. It actually went to a support e-mail box, which gets dozens of emails a minute sometimes, under all sorts of different aliases. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 8.11 possible problem
You should/need to be able to figure out from the logs the spool file name. One thing to try is search the logs for your incoming e-mail address in the time frame you got it. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Monday, May 03, 2004 5:04 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] 8.11 possible problem Upgraded to 8.11 - no apparent issues. Did a reboot just in case. About 1.5 hours later, a bagle virus, in a .cpl file, found it's way to my computer. McAfee alerted me. Unfortunately, McAfee completely wiped out any trace of said virus, so I'm unable to go back to logs on server to confirm what might have happened. I use f-prot and AVG on mail server. I've got BANEXT CPL in my virus.cfg (this is the first time a .cpl file has gotten through). I'm thinking / worrying that this patch to Imail recreated the problem we had a couple of months ago when Imail wouldn't call declude consistently. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] 8.11 possible problem
Ah, if were that easy. It actually went to a support e-mail box, which gets dozens of emails a minute sometimes, under all sorts of different aliases. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] 8.11 possible problem
Upgraded to 8.11 - no apparent issues. Did a reboot just in case. About 1.5 hours later, a bagle virus, in a .cpl file, found it's way to my computer. McAfee alerted me. Unfortunately, McAfee completely wiped out any trace of said virus, so I'm unable to go back to logs on server to confirm what might have happened. I use f-prot and AVG on mail server. I've got BANEXT CPL in my virus.cfg (this is the first time a .cpl file has gotten through). I'm thinking / worrying that this patch to Imail recreated the problem we had a couple of months ago when Imail wouldn't call declude consistently. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
