similar to: post-delivery virus scan

Op 11/10/2016 om 10:05 AM schreef Teemu Huovila: > > On 09.11.2016 23:36, Brad Koehn wrote: >> I have discovered that many times the virus definitions I use for scanning messages (ClamAV, with the unofficial signatures http://sanesecurity.com/usage/linux-scripts/) are updated some time after my server has received an infected email. It seems the virus creators are trying to race the

On 09.11.2016 23:36, Brad Koehn wrote: > I have discovered that many times the virus definitions I use for scanning messages (ClamAV, with the unofficial signatures http://sanesecurity.com/usage/linux-scripts/) are updated some time after my server has received an infected email. It seems the virus creators are trying to race the virus definition creators to see who can deliver first; more than

On 2016-11-09 21:36, Brad Koehn wrote: > I have discovered that many times the virus definitions I use for > scanning messages (ClamAV, with the unofficial signatures > http://sanesecurity.com/usage/linux-scripts/) are updated some time > after my server has received an infected email. It seems the virus > creators are trying to race the virus definition creators to see who > can

> On Nov 10, 2016, at 3:38 AM, Stephan Bosch <stephan at rename-it.nl> wrote: > > Op 11/10/2016 om 10:05 AM schreef Teemu Huovila: >> >> On 09.11.2016 23:36, Brad Koehn wrote: >>> I have discovered that many times the virus definitions I use for scanning messages (ClamAV, with the unofficial signatures http://sanesecurity.com/usage/linux-scripts/) are updated

On Wed, 9 Nov 2016 15:36:33 -0600 Brad Koehn wrote: [ ... ] > To help detect and remove the infected messages after they?ve been delivered to users? mailboxes, I created a small script that iterates the INBOX and Junk mailbox directories, scans recent messages for viruses, and deletes them if found. The source of my script (run via cron) is here: https://gitlab.koehn.com/snippets/9 Bad

Are there updated instructions on setting up FTS with solr? I?m in the midst of upgrading my site and the links don?t appear to work or be applicable to current versions of solr. I grabbed 6.3.0 from apache and the instructions are no longer working, e.g., there?s no `solr/conf/schema.xml` file to replace; the `start.jar` has moved, etc. Just wondering if there?s somewhere else I should look, or

Hi, I need advice on how virus scan and removal can be done on a _mdbox_ mail storage? On a maildir storage the virus scanner (e.g. clamav etc.) can detect and remove a email that is infected, since every email and attachment are stored in separate files. But in mdbox the emails and attachments are compressed together in one ore more mdbox-files ... I am anxious to convert my mail

Hello David, ----- Nachricht von David Pottage via dovecot <dovecot at dovecot.org> --------- Datum: Wed, 20 Feb 2019 14:56:51 +0000 Von: David Pottage via dovecot <dovecot at dovecot.org> Antwort an: David Pottage <david at chrestomanci.org> Betreff: Re: Virus scan + removal on a mdbox mail storage An: dovecot at dovecot.org > On 2019-02-20

Hi, the Wine program seems great. I run Eudora in WinXP, and this program will enable me to run Eudora in Fedora 3 and use the same mailboxes via Captive-NTFS - and so I will always have my email up-to-date. I have one big concern: viruses. Is it possible for me to get infected with a virus using Wine? If I got infected, how well could the virus infect my system? Meaning, I plan to

An attachment called (WORM_SOBIG.C) in an email that appears to have been sent from your email address to (arrowcomp at xtra.co.nz) contained the virus (WORM_SOBIG.C), which has been deleted. If you do not believe you were the actual sender, the Klez virus is likely to be the culprit. The Klez virus works by forging the 'From' address inside the virus infected email, which means you can

(Embedded image moved to file: pic10389.pcx) NVC for Domino Virus Warning This is an automatically generated message. A possible virus, 'Yaha.E@mm', was detected in attachment 'Neu_Textdokument.zip_.scr' in document '[Samba] Neu Textdokument'. Database: 'KAWILK01 Mailbox'. Document was apparently created on '26.01.2003 17:45:16' by

ugh :) Today I became infected with the bliss virus, any info on this would be appreciated! How do I scan for files infected and is it possible to remove it? I first noticed the infection when running a program (not as root) messages flashed on the screen about transversing directories and such. The program (gimp) had been working fine since I downloaded the binary for gimp from their main

Shortly after I subscribed to this Samba list I started receiving numerous emails infected with the Swen/Gibe worm. Many of these emails contained the email addresses of Samba list members. I believe a subscriber of the Samba list has the Swen virus. Has anyone else on this list been getting emails infected with the Swen/Gibe worm? Please update your virus definitions and do a virus scan just to

Great, just received 9 virus emails in the past 24 hours from the asterisk list where people have had my address in their address book. Heads up people, it's an attachment, the text looks a little jingl'ish' why would you open it? Cheers, Dean -------------- next part -------------- An HTML attachment was scrubbed... URL:

On 03/04/16 22:10, Ireneusz Piasecki wrote: > W dniu 03.04.2016 o 04:39, Rob Kampen pisze: >> EPEL maintainers? >> I note messages in the log about updated version 0.99.1 of CLAMAV >> being available since Mar 5th. >> for CentOS 6 no update is available yet. >> I used to use rpmforge for this package but that languished for months >> before updates became

It appears that someone has harvested email addresses from the S-news or one of the R lists and is sending out viruses. The mail does not come from the lists, but appears to come from people on these lists. (Closer examination of the headers indicates that it does not really come from the person indicated in the "from" field.) The mail is probably directed to people on these lists as

Antigen for Exchange found term_on_rekey_rq.patch infected with Unknown (?) virus. The file is currently Detected. The message, "terminate on re-key request (patch)", was sent from Marko Asplund and was discovered in SMTP Messages\Inbound located at Unknown/Unknown/MSMAIL.

Hi all, Last week we were infected with the Nimda virus. Our machines are clear now but I was wondering if there was a way in samba to stop .eml files being created on shares. As this virus spreads through shares on machines samba shares are vulnerable. Any ideas?? P.S. All of our e-mail is virused scanned, so no problem there ------------- Kristyan Osborne IT Technician Longhill High School

Hi, This may seem a fairly obvious question but I need to check it out. It's also fairly urgent so I apologise that I haven't made a good check of the FAQ's or mailing archives. We have a Solaris box with Samba installed. We are on a campus network where boxes that are infected are blocked from the network as a security measure. We have had our server blocked as it is probing port

----------------------- This e-mail is generated by Skynet Mail Protection to warn you that the e-mail sent by samba@lists.samba.org to vincent.brabant@skynet.be is infected with virus: Win32/Mydoom.A@mm. Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat de e-mail gestuurd door samba@lists.samba.org naar vincent.brabant@skynet.be geinfecteerd is met Win32/Mydoom.A@mm.