Stop/Start the decludeproc will reset the hijack counter.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario
Antonio
Sent: Tuesday, October 31, 2006 9:42 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] Hijack Question
For 4.x, you have to either restart the declude process or put that IP into
the Hijack .cfg to allow mail through.
I believe 3.05 would be the same.
They are contemplating an improvement to this aspect of Hijack in a future
version, but no idea of if / when.
- Original Message -
Mike,
Thanks a lot for your prompt response.
Regards
Mario Antonio
- Original Message -
From: Mike N [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, October 31, 2006 10:16 AM
Subject: Re: [Declude.Virus] Hijack Question
For 4.x, you have to either restart
@declude.com
Sent: Tuesday, October 31, 2006 10:18 AM
Subject: RE: [Declude.Virus] Hijack Question
Stop/Start the decludeproc will reset the hijack counter.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario
Antonio
Sent
, October 31, 2006 11:50 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Hijack Question
David,
One more question,
I am seeing that some Q files remain in the spool\proc\work folder, is this
normal?
why?
Should I clean them manually? Where are the corresponding D files?
Regards
Mario
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, October 31, 2006 1:58 PM
Subject: RE: [Declude.Virus] Hijack Question
There should not be orphan files I would think you are running some type
of
virus scanner that is removing the D*.smd files
Subject: Re: [Declude.Virus] Hijack Question
David,
I am running f-prot 3.16f
Take a look at my configs
SCANFILE C:\f-prot_windows\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5
/PACKED /NOBOOT /DUMB /REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
VIRUSCODE 8
REPORT Infection:
Any
@declude.com
Subject: Re: [Declude.Virus] Hijack Question
David,
I am running f-prot 3.16f
Take a look at my configs
SCANFILE C:\f-prot_windows\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5
/PACKED /NOBOOT /DUMB /REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
VIRUSCODE 8
REPORT
for anything
unusual.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, October 31, 2006 1:52 PM
Subject: RE: [Declude.Virus] Hijack Question
1. Make sure that the Real-Time scanner of F-prot is disabled
2. At a minimum you should
DEBUG logs for this would be extremely helpful
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Tuesday, October 31, 2006 3:23 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Hijack Question
-David
Since it is out
First, you should be actively monitoring
the HOLD2 directory. There are some scripts on the Declude Tools sight that can
be used for this.
Second, you do not need to cycle the
SMTP service. However, you will have to rename the HOLD2 files if you want to release
them and then manually
; -- Henry J. Kaiser
- Original Message -
From:
John Tolmachoff (Lists)
To: Declude.Virus@declude.com
Sent: Monday, February 07, 2005 2:53
AM
Subject: RE: [Declude.Virus] HiJack
Question
First, you should
be actively monitoring the HOLD2 directory. Th
12 matches
Mail list logo
