Re: [Declude.Virus] strange zip file

2004-08-09 Thread Marc
Apparently it's another variant of the ubiquitous Bagle worm. http://www.eweek.com/article2/0,1759,1633739,00.asp -M - Original Message - From: Bob McGregor To: [EMAIL PROTECTED] Sent: Monday, August 09, 2004 3:18 PM Subject: Re: [Declude.Virus] strange zip file It appears as though

RE: [Declude.Virus] Attack?

2004-09-21 Thread marc
I am with Kris, thats a great solution, we just in planning here. And of course, deleting all nobody aliases... marc. At 19:17 21.09.2004, you wrote: I had two gateways running declude, both boxes were Dual Xeon 2.8Ghz, 2GB Ram, 3x36Gb 15K scsi, 128MB Raid controller and both boxes could

RE: [Declude.Virus] Fprot GDI Scanner lines.

2004-09-28 Thread marc
/ARCHIVE=5 /NOBOOT /DUMB /REPORT=report.txt # SKIPEXT GIF # SKIPEXT JPG SKIPEXT TXT SKIPEXT MPG SKIPEXT PNG A Desktop AV F-Prot 3.15B (same version and updates) detect the JPEG exploit. any ideas? marc At 23:31 27.09.2004, you wrote: Same here. Is there a way to make f-prot w\Declude catch

RE: [Declude.Virus] Fprot GDI Scanner lines.

2004-09-28 Thread marc
detect the JPEG exploit!? marc At 14:18 28.09.2004, you wrote: Hi Uwe: I am not sure where you are seeing 3.15A- I downloaded B version last week by logging into our account on F-Prot site. Kami [Scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus

Fwd: Re: [Declude.Virus] [Declude.JunkMail] Solution to death of IMail

2004-10-26 Thread marc
scott, it is never too late and i think your are right with the 90% of your customers. marc At 13:09 26.10.2004, you wrote: [Replying to several posts here] Here's a thought - what about a Declude mail server? It sounds like a great idea, but it would also be a huge undertaking

Re: [Declude.Virus] about Imail1.exe security issue

2004-11-24 Thread marc
same here after the update to 8.14 and hf1 marc At 15:57 24.11.2004, you wrote: We had same issue, then mysteriously got fixed. Imail was aware of it as we had opened ticket. Everytime this would happen, the affected domain registry entry would have some weird users and entries (dont recall

Re: [Declude.Virus] about Imail1.exe security issue

2004-11-24 Thread marc
i think thats not by a clients PC virus. i got just right the ip using the imail1.exe to existing and no existing users (217.255.255.100) searching the log*.txt itsd using different pc names sorry about this post, because this is not a declude issue marc At 16:45 24.11.2004, you wrote

Re: [Declude.Virus] about Imail1.exe security issue

2004-11-24 Thread marc
://vil.mcafeesecurity.com/vil/content/v_130130.htm - Original Message - From: marc [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, November 25, 2004 12:01 AM Subject: Re: [Declude.Virus] about Imail1.exe security issue i think thats not by a clients PC virus. i got just right the ip using

[Declude.Virus] HiJack Question

2005-02-06 Thread Marc
Scenario: Dialup ISP using dynamic IP allocation. Customer#1 using IP address of 1.2.3.4 trips threshold #2. Logs off. Customer #2 logs on and obtains the same IP that customer #1 had (1.2.3.4) My understanding is that HiJack will block Customer #2's outbound email as well. At leastuntil

Re: [Declude.Virus] HiJack Question

2005-02-07 Thread Marc
John, Been there..doing that. My concern is that Customer #2's email will be incorrectly blocked due to DECCON's "memory". I felt it would be safer to stop the SMTP service before killing the deccon instance. -M---"Problems are only opportunities in work clothes." -- Henry J. Kaiser

RE: [Declude.Virus] Stranger... about imail1.exe be hijacked.

2005-12-10 Thread marc
, again all symptoms like your description, also new users was created like po, post, postma, postmaster, ... so i am sure this is a declude issue. Windows 2000 Server Imail 8.15 HF2 Declude Virus Standard 1.82 F-Prot Marc At 18:49 09.12.2005, you wrote: What I think it might be is a combination

Re: [Declude.Virus] F-Prot Switches

2006-03-28 Thread marc
SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /PACKED /NOMEM /ARCHIVE=5 /NOBOOT /DUMB /REPORT=report.txt marc At 18:46 28.03.2006, you wrote: After seeing Matt's response I'm curious what other users are using for their F-prot switches. Some of the switches Matt uses seem like

RE: [Declude.Virus] F-Prot Switches

2006-03-29 Thread marc
really rare information about the /AI Switch... just found this about Neural network: http://www.f-prot.com/support/windows/fpwin_faq/17.html We will not use it, because increases the risk of false alarms. marc At 03:55 29.03.2006, you wrote: What is the value of the AI switch? I see

[Declude.Virus] Declude letting viruses through?

2002-11-06 Thread Marc Catuogno
hese being delivered? I am running Imail 7.12 and a family recent version of declude. Any ideas? Marc

RE: [Declude.Virus] Declude letting viruses through?

2002-11-06 Thread Marc Catuogno
. Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus-owner;declude.com]On Behalf Of R. Scott Perry Sent: Wednesday, November 06, 2002 05:47 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Declude letting viruses through? I do a weekly scan with of my Imail

Re: [Declude.Virus] Declude letting viruses through?

2002-11-06 Thread Marc Catuogno
Strictly paranoia. In case something does get through. In case one of my users sends out a virus through their webmail. I usually just do a full system scan once a week or so, I don't have the scanner running all the time. Marc - Original Message - From: John Tolmachoff [EMAIL PROTECTED

[Declude.Virus] Turing off .pif notifications? (sobig.F)

2003-08-19 Thread Marc Catuogno
and then the notice is going out to either the innocent or to bad addresses - this is generating more useless e-mail traffic. I'd like to keep the notify on the .exe (for now) but is there a way to turn it off for just the .pif? Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E

[Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
? Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
I thought BANEXT worked before the scanner? DAMN... maybe my f-protect.exe is old and not catching viruses? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, August 20, 2003 04:03 PM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
I just ran a manual scan on the spool virus directory with F-protect and it identified all the held viruses as [EMAIL PROTECTED] - BUT I did run an update immediately before that even though I ran it this morning. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[Declude.Virus] Notifying Postmasters/ISPs etc of viruses

2003-08-20 Thread Marc Catuogno
Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus

RE: [Declude.Virus] Notifying Postmasters/ISPs etc of viruses

2003-08-20 Thread Marc Catuogno
The Pentagon? REALLY??? That's friggin scary as hell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, August 20, 2003 06:32 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Notifying Postmasters/ISPs etc of viruses

RE: [Declude.Virus] No wonder viruses spread

2003-08-24 Thread Marc Catuogno
Um - I'm not sure, but I think he may be right. The declude virus catch looks like a bounce from his server, not sent through his server. As you said the e-mail address is forged - so if an infected computer has a user from your domain and a bad address from his, once his server can't deliver

RE: [Declude.Virus] No wonder viruses spread

2003-08-24 Thread Marc Catuogno
But since the subject that you are receiving is undeliverable : RE: Details isn't that his server is just returning the message Unless the virus has more subjects then the list of subjects that I am aware of. Looks like the original message had the virus attached and that was Declude detected

RE: [Declude.Virus] No wonder viruses spread

2003-08-25 Thread Marc Catuogno
So if a forged user from my domain sends a message to another IMAIL machine to a user that doesn't exist and then their Imail Machine rejects the message. I'm assuming that postmaster gets the entire message (virus included) based upon the forged domain. So I would get the message, even though

RE: [Declude.Virus] SoBig

2003-08-30 Thread Marc Catuogno
SMTP for the changes to take effect Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Spangenberg Sent: Saturday, August 30, 2003 1:51 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] SoBig Where are you denying those IP addressesat your

RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2003-08-30 Thread Marc Catuogno
I had to argue with an IMAIL admin with Declude for two days and had to e-mail him the damn otherpostmaster and sender eml files before he would change them. I hope my change took effect... : ) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John

RE: [Declude.Virus] Your mail server sent us a virus: SOBIG FORGES

2003-08-30 Thread Marc Catuogno
SKIPIFVIRUSNAMEHAS Bugbear SKIPIFVIRUSNAMEHAS Bridex SKIPIFVIRUSNAMEHAS Braid SKIPIFVIRUSNAMEHAS Palyh SKIPIFVIRUSNAMEHAS Fizzer SKIPIFVIRUSNAMEHAS Ganda SKIPIFVIRUSNAMEHAS Dumar Good luck - Marc -Original Message- From: Postmaster [mailto:[EMAIL PROTECTED

[Declude.Virus] FW: Your mail server sent us a virus

2003-09-04 Thread Marc Catuogno
Scott can you bitch slap this moron? I've sent him three separate e-mails with detailed instructions (I think I even copied one to the list) on how to turn this off in Declude and he hasn't replied once. Maybe you have a better contact e-mail. Marc -Original Message- From: Postmaster

[Declude.Virus] Blocking SObig IPs

2003-09-05 Thread Marc Catuogno
This maybe a stupid observation so bear with me please. As I was adding more and more IPs to the control access list something occurred to me. It seems that most of the offending IPs are from cablevision companies. If I could get the range of their dynamic IPS I could block them all,

[Declude.Virus] SoBig more prolific now?

2003-09-06 Thread Marc Catuogno
Last night I got hammered with about 3,000 sobigs in the course of about 2 hours from one infected computer - it seems this particular computer had almost every address from my domain on it. This morning I got about 100 from another computer - the strange thing was that all 100 were sent to a

RE: Re[2]: [Declude.Virus] SoBig more prolific now?

2003-09-08 Thread Marc Catuogno
I have been doing that, but I have heard that IMAIL's CAL can only handle 100 IPS and I am running at about 90 now. Most of the offenders are from Optimum online, I could block their whole IP range, but then I think my home Optimum users trying to POP or SMTP (maybe even Webmail)won't be able to

[Declude.Virus] Partial (Fragmented) Vulnerability

2004-01-19 Thread Marc Hilliker
Is there any way to disable the Partial (Fragmented) Vulnerability check? Thx. -Marc --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED

RE: [Declude.Virus] new forging worm: Bagle

2004-01-19 Thread Marc Catuogno
Wouldn't you want to also update your otherpostmater.eml and sender.eml with: SKIPIFVIRUSNAMEHAS Bagle SKIPIFVIRUSNAMEHAS Beagle To stop the bogus warnings? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Monday, January 19,

RE: [Declude.Virus] new forging worm: Bagle

2004-01-19 Thread Marc Catuogno
AH! That is a nice feature that I must have missed! Gratzie! Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Monday, January 19, 2004 09:42 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] new forging worm: Bagle Wouldn't

[Declude.Virus] FW: Your mail server sent us a virus

2004-01-30 Thread marc catuogno
Scott - did you ever find these guys? They still don't get it... -Original Message- From: Postmaster [mailto:[EMAIL PROTECTED] Sent: Friday, January 30, 2004 10:08 AM To: [EMAIL PROTECTED] Subject: Your mail server sent us a virus The Declude Virus software on our mail server detected

[Declude.Virus] A horrible idea - maybe it could work?

2004-01-31 Thread marc catuogno
... I dunno I guess I'm just typing what I'm thinking, maybe I'm just posting this to start an argument or get flamed. Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

RE: [Declude.Virus] A horrible idea - maybe it could work?

2004-01-31 Thread marc catuogno
the mail whether she remembers it or not and cousin Fred is infected. Challenge/Response is ok for end users, but I don't see a real benefit for it with servers. Rich - Original Message - From: marc catuogno [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, January 31, 2004 10:37 AM

RE: [Declude.Virus] BANEXT

2004-02-01 Thread marc catuogno
That was a great list. I have the following extensions blocked as well: BANEXT data BANEXT link BANEXT unk BANEXT uue I wish I remember why - but I imagine it won't hurt... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

[Declude.Virus] .PIF files being held instead of deleted?

2004-03-01 Thread Marc Catuogno
I am running the latest beta 1.78. I have the following in my virus.cfg file: BANEXT scr BANEXT pif BANEXT bat BANEXT exe DELETEVIRUSES ON Yet I am still seeing e-mails with .PIF extensions being held in the virus subfolder. I'm concerned that these are

[Declude.Virus] OT: Netsky pronunciation?

2004-03-02 Thread marc catuogno
I saw a woefully inadequate report on this virus on Fox 5 NY last night - don't even get me started, do these reporters even talk to people who deal with viruses? Love how they report it as new yesterday - but anyway, the reported called it net-ski. I have been inclined to call it that as well.

RE: [Declude.Virus] Update- New virus

2004-03-03 Thread marc catuogno
I didn't see your last e-mail? What virus? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Wednesday, March 03, 2004 8:32 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Update- New virus Hi; Just to update my last email.

[Declude.Virus] Passworded zip files still getting through!

2004-03-03 Thread marc catuogno
F.Y.I. I am running the latest interim release: 1.78i.8 and have BANEZIPEXTS ON In my config file but several people have complained to me that they are still getting the zipped files. I have added BANEXT EZIP In the hopes of stopping them all now. Marc --- [This E-mail scanned

RE: [Declude.Virus] Passworded zip files still getting through!

2004-03-03 Thread marc catuogno
Sorry for my incomplete message what I meant to say is that they are still getting PASSWORDED zip files. Even with the addition of BANEXT EZIP -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, March 03, 2004 10:48 AM To:

RE: [Declude.Virus] Passworded zip files still getting through!

2004-03-03 Thread marc catuogno
Confirmed. I commented out # BANEZIPEXTSON I left in: BANEXT EZIP And resent myself the virus and it was blocked. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Ryan Sent: Wednesday, March 03, 2004 11:18 AM To: [EMAIL PROTECTED

[Declude.Virus] Use Net Send to alert user of virus?

2004-03-04 Thread Marc Catuogno
Does anyone have a way of using doing this? I mean if scumware people and pornographers can use the windows messenger service why can't I? I know it wouldn't always work, but most of the IP's I get in my virus notifications are from Road Runner or Cablevision. I'll bet more than half of those

[Declude.Virus] NAV 2003 catches beagleJ in encrypted zip?

2004-03-06 Thread marc catuogno
I was trying to test the latest interim and when I tried to send myself a copy of the virus, NAV outbound scanning caught it even though it was passworded. I tried to unzip it to make sure and it does require a password. I didn't think they could detect it like that... --- [This E-mail scanned

RE: [Declude.Virus] NAV 2003 catches beagleJ in encrypted zip?

2004-03-07 Thread marc catuogno
Plain old NAV 2003 on my Win XP workstation that scans e-mail - sorry for not being specific. BUT the weird thing is there was no e-mail with a PW. I had saved the file from one that had gotten through and attached it to a e-mail with the only the word test in the body of the e-mail. I don't even

RE: [Declude.Virus] NAV 2003 catches beagleJ in encrypted zip?

2004-03-07 Thread marc catuogno
If you want I can send it to you, it isn't important but I found it curious. All I know is it is a virus, it is reported as beagle.j by NAV, it is in a passworded .Zip file, there in nothing but the word test in the body of the e-mail and it is caught by the e-mail scanning as it goes out.

RE: [Declude.Virus] A different view of banned files

2004-03-16 Thread marc catuogno
I think this has been brought up a few times, I think it would be a good option as well once it is tweaked. You forgot PDF, txt, bmp, wks, wpd, ppt and maybe .zip : ) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Shadix Sent: Tuesday, March 16,

[Declude.Virus] NAV 2003 catches passworded virus??

2004-03-16 Thread marc catuogno
if it would be caught, and it was - before it was opened. Again, this isnt really important, but Id like to know how it is happening. Any theories??? Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 16, 2004 2:54 PM To: [EMAIL PROTECTED] Subject

RE: [Declude.Virus] NAV 2003 catches passworded virus??

2004-03-16 Thread marc catuogno
:[EMAIL PROTECTED] On Behalf Of Nick Sent: Tuesday, March 16, 2004 6:18 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] NAV 2003 catches passworded virus?? On 16 Mar 2004 at 17:20, marc catuogno wrote: Marc, I do not have Norton so I cannot test it - have you sent to your desktop

RE: [Declude.Virus] Deactivation

2004-04-07 Thread marc catuogno
I believe you are in the same exact situation you were before the trial. Imail would've passed on the spam and viruses too with out Declude. I would buy it, really, it is the only thing saving my butt... Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [Declude.Virus] Mcafee NetShield Problems

2004-04-28 Thread marc catuogno
Start;Programs;Imail;Imail release notes - I'm really shocked that they don't put this in Imail admin or help or something... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Hahn Sent: Wednesday, April 28, 2004 8:40 PM To: [EMAIL PROTECTED]

RE: [Declude.Virus] OT: Animal Messages with Viruses?

2004-07-21 Thread marc catuogno
I am running 1.79 (I don't remember which interim but I wil D/l the latest) I have in my global config: BANEXT EZIP BANEZIPEXTS ON I am still getting some e-mails through. They are zip files 67 bytes or so and don't seem to have anything in them nor are they password protected. Any way to stop

RE: [Declude.Virus] OT: Animal Messages with Viruses?

2004-07-21 Thread marc catuogno
I checked a few out and figured they weren't dangerous and told everyone that they were corrupted or stripped attachments... but the support calls and e-mails about the passworded zip files that everyone got, what a waste of time, sigh. I did a Baname on what was listed as possible file names

[Declude.Virus] Bitdefender claims terror ties to virus

2004-07-21 Thread marc catuogno
What do you guys think of this? http://antivirus.about.com/od/virusdescriptions/a/atakb.htm I've forwarded it to all my users, maybe they will take their computer security more seriously. Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses

RE: [Declude.Virus] Bitdefender claims terror ties to virus

2004-07-22 Thread marc catuogno
for the time being :) Matt marc catuogno wrote: What do you guys think of this? http://antivirus.about.com/od/virusdescriptions/a/atakb.htm I've forwarded it to all my users, maybe they will take their computer security more seriously. Marc --- [This E-mail scanned for viruses by Declude Virus

RE: Re[2]: [Declude.Virus] Bitdefender claims terror ties to virus

2004-07-22 Thread marc catuogno
Bonk Bonk on the head... (yes it was Miri) I'd just like to get more people thinking about securing their systems (as I have spent the last hour on a new agents machine removing Ncase and all the other spyware), at least minimally, because it really is scary thinking about what a determined

RE: [Declude.Virus] Another Varient??!

2004-07-26 Thread marc catuogno
They are still getting through to my users. Even though Anyway to banexten on this one? Something like BANNAME *prudentialrand.com.zip Or BANEXT com.zip It is creating some confusion and I'm not sure if it's a viable virus that is getting through or not. I'd like to stop it regardless. Marc

[Declude.Virus] Blocking the files in mydoom

2004-07-26 Thread marc catuogno
I am running Declude 1.79 and this is in my CFG file: BANEZIPEXTS ON BANEXT com In desperation I have added: BANNAME prudentialrand.com BANNAME prudentialrand.com.zip BANNAME prudentialrand.zip BANNAME [EMAIL PROTECTED] BANNAME *prudentialrand.com.zip The files are still getting through to my

RE: [Declude.Virus] Another Varient??!

2004-07-26 Thread marc catuogno
Sorry - yes Virus defs are up to date. I have blocked .zip files for now. I think that they are non-viable files that are slipping through, but I need to stop them as all my users want to know what is going on... I will remove the erroneous entries from my config file. Marc -Original

RE: [Declude.Virus] Blocking the files in mydoom

2004-07-26 Thread marc catuogno
? CRAP. Maybe I should go back to the last beta... I am using F-protect and I updated it about noon and I'm using an interim downloaded about three days ago. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of marc catuogno Sent: Monday, July 26, 2004 3

RE: [Declude.Virus] Blocking the files in MyDoom

2004-07-26 Thread marc catuogno
blocked all zip files, as I am seeing quite a few that are not being caught by banned extension or F-Prot or AVG. I am investigating these. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of marc

RE: [Declude.Virus] Blocking the files in mydoom

2004-07-26 Thread marc catuogno
can be added to the wish list for Declude Virus? Maybe even a BANZIPEXT ON (not just e-zip) so that people can get zipped .JPGs but not zipped .exe's Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, July 26, 2004 4

RE: [Declude.Virus] Blocking the files in mydoom

2004-07-26 Thread marc catuogno
http://www.informationweek.com/story/showArticle.jhtml?articleID=25600493 According to this it is double zipping so the only way I can think of stopping it is by banning .zip files completely. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent:

RE: [Declude.Virus] OT: Hello?

2004-07-29 Thread Marc Catuogno
Title: OT: Hello? Hi Sharyn. I haven't seen anything today either, maybe everyone in the north-east is out looking at that strange yellow object in the sky (the sun) and trying to dry out. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of

[Declude.Virus] OT: F prot as a desktop scanner

2004-08-01 Thread marc catuogno
- Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus

[Declude.Virus] GDI false Postive

2004-09-29 Thread marc catuogno
/10.1.0.2006 Does he need to update his version? Or is it something else? Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe

RE: [Declude.Virus] GDI false Postive

2004-09-29 Thread marc catuogno
Thanks- Both jpgs held were sent by the same person - a graphic designer using a MAC. If that helps you change the code. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, September 29, 2004 10:52 AM To: [EMAIL PROTECTED]

RE: [Declude.Virus] Recommended Scanner

2004-10-07 Thread marc catuogno
I couldn't get Clamav to run on mine. May I ask what version of ClamAV you are using? When I installed it I couldn't figure out if it was in and Declude kept throwing me an error. What is your Declude config line ? Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto

RE: [Declude.Virus] wuaurlt.exe

2004-12-14 Thread marc catuogno
I also run crap cleaner - it can be set to clean the prefetch, temp Internet files, C:\Documents and Settings\User\Local Settings\Temp and more. It has helped me get virus/Trojan files that won't other wise delete. Also the online scan from Trend Micro is also a great help. It has been a great

[Declude.Virus] WinZip Companion for Outlook (OT)

2005-02-28 Thread Marc Catuogno
(AES). Note: Recipients to whom you send AES-encrypted Zip files must have a compatible Zip file utility, such as WinZip 9.0, in order to decrypt the files. Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http

[Declude.Virus] Bypassing whitelist (German Spam)

2005-05-21 Thread Marc Catuogno
? I'm stumped - Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.

RE: [Declude.Virus] EXITSCANONVIRUS

2005-05-30 Thread Marc Catuogno
John, Sorry to hear about that it sucks. There was something I heard once about having identical drives mirrored. That if they were from the same vendor and the same model and lot number they can fail at the same time. The IBM Deskstar was apparently notorious for this. If Im

RE: [Declude.Virus] New virus out?

2005-05-31 Thread Marc Catuogno
I've gotten a few: 26KB files named 1.zip, 7.zip and work.zip so far -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, May 31, 2005 11:22 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] New virus

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Marc Catuogno
You have a user base that is educated and that you trust enough to click a link that would send them a potential virus? I so envy you... I'm scared to let them open and send and receive regular e-mail. I had one user ready to open an account for someone in Nigera. -Original Message-

[Declude.Virus] OT: Virus Backscatter

2005-11-23 Thread Marc Catuogno
The latest outbreak has caused me a great deal of backscatter. You sent a banned file, virus in an attachment sent by you, undeliverables and so. I am very hesitant to try to create rules in JM to stop all notices like this because some of them are necessary. I've pretty much told the users to

Re: [Declude.Virus] OT: Virus Backscatter

2005-11-23 Thread marc catuogno
well for us. Darin. - Original Message - From: Marc Catuogno [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Wednesday, November 23, 2005 9:12 AM Subject: [Declude.Virus] OT: Virus Backscatter The latest outbreak has caused me a great deal of backscatter. You sent a banned file

[Declude.Virus] Blank folding vulnerablity help

2006-01-30 Thread Marc Catuogno
Somebody is sending e-mail that must get through (of course) and it is failing the blank folding Vulnerability test. What can I tell this person they should do to not have this e-mail get caught? I dont want to allow vulnerabilities through but. 01/20/2006 07:25:44 Qd6c809e500d45890

RE: [Declude.Virus] Blank folding vulnerablity help

2006-01-30 Thread Marc Catuogno
Matt thank you What version of Declude is needed for these allows? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, January 30, 2006 5:09 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Blank folding vulnerablity help Marc

RE: [Declude.Virus] Blank folding vulnerablity help

2006-01-30 Thread Marc Catuogno
and higher. I think it came along somewhere after 2.0.6.0 Matt Marc Catuogno wrote: Matt thank you What version of Declude is needed for these allows? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Monday, January 30, 2006 5:09 PM To: Declude.Virus

RE: [Declude.Virus] Blank folding vulnerablity help

2006-01-30 Thread Marc Catuogno
Sent: Monday, January 30, 2006 9:10 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Blank folding vulnerablity help Marc, 2.0.6.16 is as solid as any release that I have seen, and I can't see how you would have any issues with upgrading to it, nor are there any changes that must

RE: [Declude.Virus] Changes @ Declude

2006-02-10 Thread Marc Catuogno
I didnt get an e-mail. Dont you like me? : )~ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, February 10, 2006 1:47 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Changes @ Declude In the last 10 days we have

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Marc Catuogno
updater for NAV 9 (as the live update button only gave me definitions of the 21st) and am running a scan now. Remind me not to make so much fun of other people for opening attachments. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent

[Declude.Virus]

2007-07-12 Thread Marc Catuogno
Marc Catuogno MIS Director Prudential Rand Realty 845-825-8025 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail

RE: [Declude.Virus]

2007-07-12 Thread Marc Catuogno
, and to to the point. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Thursday, July 12, 2007 11:54 AM To: Declude Virus Subject: [Declude.Virus] Marc Catuogno MIS Director Prudential Rand Realty 845-825-8025 [EMAIL PROTECTED

[Declude.Virus] ATTENTION: My E-mail address has changed

2009-04-23 Thread marc . catuogno
Please Change Your Address Book Thank you for emailing me.nbsp; Your email has been received, and I will respond as soon as possible. We are pleased to announce that Rand Realty has recently affiliated with Better Homes and Gardens Real Estate.nbsp; Accordingly, our email addresses have

[Declude.Virus] ATTENTION: My E-mail address has changed

2009-04-24 Thread marc . catuogno
Please Change Your Address Book Thank you for emailing me.nbsp; Your email has been received, and I will respond as soon as possible. We are pleased to announce that Rand Realty has recently affiliated with Better Homes and Gardens Real Estate.nbsp; Accordingly, our email addresses have

[Declude.Virus] ATTENTION: My E-mail address has changed

2009-05-12 Thread marc . catuogno
Please Change Your Address Book Thank you for emailing me.nbsp; Your email has been received, and I will respond as soon as possible. We are pleased to announce that Rand Realty has recently affiliated with Better Homes and Gardens Real Estate.nbsp; Accordingly, our email addresses have