RE: [Declude.Virus] You should not use an on-access virus scanner that scans the ....

2007-04-17 Thread John T \(lists\)
1)  86 the read receipt requests!

2)  You should be running 4.3.46 at this point due to a problem with a
recent change in AVG.

3)  Is this happening on every email, or random?

4)  Since you are only running one virus scanner (aside from the built
in AVG,) I do not think you need to have the number 1 for each line, i.e.
SCANFILE1 and VIRUSCODE1.

 

John T

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe,
Alexander
Sent: Tuesday, April 17, 2007 12:29 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] You should not use an on-access virus scanner that
scans the 

 

Hello, 

after updating to 4.0.46 I've got these entries in one of our Mailservers: 

04/17/2007 08:49:18.391 q6de201f80068.smd Virus scanner 1 reports exit
code of 0 
04/17/2007 08:49:18.391 q6de201f80068.smd 1 [1 of 2 not deleted] files
were deleted.  You should not use an on-access virus scanner that scans the
\IMail directory or sub-directories.

04/17/2007 08:49:18.391 q6de201f80068.smd Scanned: Virus Free [MIME: 1
2108] 

Yes, I know I should disable to on-access Scanner :) 

But: 
- there is a local AVG installed, *without* real-time scanner 
- and ClamAV 
- and nothing else (F-Prot is removed after changing the licensing :) 
so I can't find anything that could delete a virus. 

Could it be a wrong setting from ClamAV (not ClamWin)? 

SCANFILE1 C:\imail\declude\runclamscan.exe log=1
C:\clamav-devel\bin\clamdscan.exe --quiet -l report.txt 
VIRUSCODE1 1 
REPORT1 FOUND 
Clam is running with Sanesecurity and malware.com.br signatures. 

Alex 

  _  

Siller AG, Wannenäckerstraße 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Jörn Bülow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 

  _  

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] You should not use an on-access virus scanner that scans the ....

2007-04-17 Thread John T \(lists\)
Unfortunately, I am still up, at least for another 15 minutes or so. If you
want to zip and send me a log file I will have a look see.

 

John Tolmachoff

eServices For You

[EMAIL PROTECTED]

(626) 737-6003

Fax (626) 737-6004

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe,
Alexander
Sent: Tuesday, April 17, 2007 1:54 AM
To: declude.virus@declude.com
Subject: AW: [Declude.Virus] You should not use an on-access virus scanner
that scans the 

 

Hello John,

 

1)  86 the read receipt requests! 

Sorry. I'm trying, but sometimes I forget to disable it. 

 

2)  You should be running 4.3.46 at this point due to a problem with a
recent change in AVG. 

Typo, it *is* 4.3.46 

 

3)  Is this happening on every email, or random? 

This morning (after updating) it happend all times, now I can't see any
entries in the log. (and we are getting virusmails :)

I'll keep an eye on the logfiles.

 

4)  Since you are only running one virus scanner (aside from the built
in AVG,) I do not think you need to have the number 1 for each line, i.e.
SCANFILE1 and VIRUSCODE1. 

modified (and no entry before and after) 

 

Alex 

 

  _  

Siller AG, Wannenäckerstraße 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Jörn Bülow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 

  _  

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.