Re: [Declude.Virus] Not detecting viruses
Hi Jim, Here are the relevant lines for the config file: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /NOFLOPPY /DUMB /REPORT=report.txt Remove the /NOFLOPPY when using fpcmd.exe Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
I don't know why there wasn't a post about this here, but there's been a discussion in Declude.Junkmail about this issue as well. The problem I had was with my command line settings for F-Prot. The Declude manual used to give the command calling for f-prot.exe in the command line. However in this recent update of F-Prot it discontinued using that program and went with fpcmd.exe instead. The Declude on-line manual now lists both. The syntax I'm using is: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOBOOT /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORT Infection: Check and see which program you're calling. Rodney Bertsch IS Coordinator Kirk NationaLease Co. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie LaSalle-Lowery Sent: Wednesday, November 24, 2004 12:00 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. The log shows virus free on every message. I'm getting emails from customers reporting threats getting through. I have strugged with f-stop but it is not running now and the log no longer indicates a problem with that. Thanks, Katie --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Not detecting viruses
Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. Scott, Did the removal of the /NOBOOT switch just start with the 3.16 version? I still have this in my fpcmd.exe line. It also shows that switch on the Declude Online Manual. Thanks, Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
This is what I had: SCANFILEC:\Progra~1\fsi\f-prot\fpcmd.exe /nomem /noself /arc /report=report.txt So, of course I realized I was a complete idiot had it still set for AVG. So, I changed it according to my manual (yes, the MANUAL). Now I have: SCANFILEC:\Progra~1\fsi\f-prot\fpcmd.exe /type /silent /nomem /archive VIRUSCODE 3 VIRUSCODE 6 REPORT Infection: Is that the correct config for F-prot 3.16? I should not do anything in a rush before leaving for the night as I did last night. Thanks, Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 10:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Okay, made the change and it was good for a minute or two then back to: 11/24/2004 10:41:45 Qc7d80b560070ec4e WARNING: F-Stop is running, please disable it (you may need to reinstall F-Prot and disable the Realtime Protector to disable it), or it will interfere with Declude. I have reinstalled F-Prot numerous times and deselected autoprotect and the scheduler. It keeps coming back... Any suggestions? Thanks! ~Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 10:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Not detecting viruses
Are you using the F-prot real-time protector? If so, you should disable it. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 12:49 PM Subject: RE: [Declude.Virus] Not detecting viruses Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Did the removal of the /NOBOOT switch just start with the 3.16 version? I still have this in my fpcmd.exe line. It also shows that switch on the Declude Online Manual. It's the /NOFLOPPY switch that must be used with F-Prot.exe and must not be used with fpcmd.exe. /NOBOOT can (and should) be used with both. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Easier said than done... I'm having the same problem. I can get it to work properly temporarily. I've disabled, I've reinstalled w/o real-time protection. Still struggling. ~Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, November 24, 2004 11:21 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Are you using the F-prot real-time protector? If so, you should disable it. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 12:49 PM Subject: RE: [Declude.Virus] Not detecting viruses Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. This means that either [1] You're running an on-access scanner, which must be disabled, or [2] Your SCANFILE/REPORT settings are mismatched (such as having /report=report.txt with no REPORT line). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Darin, The real time protector is not installed. Thanks Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, November 24, 2004 12:21 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Are you using the F-prot real-time protector? If so, you should disable it. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 12:49 PM Subject: RE: [Declude.Virus] Not detecting viruses Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Here are the relevant lines for the config file: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /NOFLOPPY /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORT Infection: Please advise. Thanks Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 12:21 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Not detecting viruses I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. This means that either [1] You're running an on-access scanner, which must be disabled, or [2] Your SCANFILE/REPORT settings are mismatched (such as having /report=report.txt with no REPORT line). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Here are the relevant lines for the config file: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /NOFLOPPY /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORT Infection: Those log file entries appear correct; have you triple-checked that you are not running an on-access virus scanner (you can try typing \IMail\Declude -diag from a command prompt; it will let you know if you are). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Here is the output of the diag: Declude 1.81 (C) Copyright 2000-2004 Computerized Horizons. Diagnostics ON (Declude v1.81). Declude JunkMail: Config file found (C:\IMail\Declude\global.CFG). Declude Virus: Config file found (C:\IMail\Declude\Virus.CFG). Declude Hijack:Not installed (no C:\IMail\Declude\Hijack.CFG file). Declude Confirm: Config file found (C:\IMail\Declude\Confirm.CFG). 41 spam tests defined: AHBL BLITZEDALL CBL DSBL ORDB SBL SORBS-HTTP SORBS-SOCKS SORBS-MISC SORBS-SMTP SORBS-SPAM SORBS-W EB SORBS-BLOCK SORBS-ZOMBIE SORBS-DUHL SPAMCOP DSN NOABUSE NOPOSTMASTER BONDEDSENDER MTLDB BADHEADERS BASE64 CMDSPACE CO MMENTS HELOBOGUS IPNOTINMX MAILFROM NOLEGITCONTENT PERCENT REVDNS ROUTING SPAMHEADERS SPFFAIL WEIGHT10 WEIGHT20 WEIGHT15 WEIGHT25 WEIGHT30 BADSENDERS CATCHALLMAILS IMail reports Official Host Name as: mail.creativedata.net. IMail's SendName registry seems OK: C:\IMAIL\declude.exe. DNS Server: 66.210.217.11 Declude JunkMail Status: STANDARD version registered. Declude Virus Status:Standard Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics. Appears that nothing is incorrect. Any ideas? Thanks Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 12:51 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Not detecting viruses Here are the relevant lines for the config file: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /NOFLOPPY /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORT Infection: Those log file entries appear correct; have you triple-checked that you are not running an on-access virus scanner (you can try typing \IMail\Declude -diag from a command prompt; it will let you know if you are). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Not detecting viruses
Here is the output of the diag: That shows that there is no on-access scanner interfering. Is the SCANFILE line all on one line (starting with SCANFILE and ending in report.txt)? Are there any errors/warnings in the log file? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
One of my co-workers just got into the office, logged onto the mail server via Remote Desktop (as I am logged on) and the Real Time Protector popped up. I have reinstalled it a number of times de-selecting the Real Time Protector but we continue to struggle with the real time protector running anyway. Jim, I don't know what kind of setup you have but you might check if it is also running on your server under another login as it was on ours. Any ideas on how I might change my configuration so this doesn't happen? ~Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Nitterauer Sent: Wednesday, November 24, 2004 11:27 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Not detecting viruses Darin, The real time protector is not installed. Thanks Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, November 24, 2004 12:21 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Are you using the F-prot real-time protector? If so, you should disable it. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 12:49 PM Subject: RE: [Declude.Virus] Not detecting viruses Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail
Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
Any ideas on how I might change my configuration so this doesn't happen? Have you tried uninstalling and reinstalling? If I recall correctly, old versions of F-Prot that were installed with the RealTime Protector had to be uninstalled and then re-installed with the RealTime Protector disabled (just reinstalling without uninstalling first wouldn't work). It sounds like 3.16 may be automatically installing the RealTime Protector. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
I changed my scan line to: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /ARCHIVE=3 /DUMB /REPORT=report.txt The errors in the log file are gone and the scanner is trapping more viruses. Not sure why removing /NOMEM /NOBOOT /NOFLOPPY makes any difference. I cannot see where these are supported command parameters for fpcmd.exe Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses) Any ideas on how I might change my configuration so this doesn't happen? Have you tried uninstalling and reinstalling? If I recall correctly, old versions of F-Prot that were installed with the RealTime Protector had to be uninstalled and then re-installed with the RealTime Protector disabled (just reinstalling without uninstalling first wouldn't work). It sounds like 3.16 may be automatically installing the RealTime Protector. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
I also noticed that the fpcmd.exe does not write directories to the disk any longer. Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses) Any ideas on how I might change my configuration so this doesn't happen? Have you tried uninstalling and reinstalling? If I recall correctly, old versions of F-Prot that were installed with the RealTime Protector had to be uninstalled and then re-installed with the RealTime Protector disabled (just reinstalling without uninstalling first wouldn't work). It sounds like 3.16 may be automatically installing the RealTime Protector. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
I copied your scan line. Looks much better. I'm still worried that the real time protector is going to come back on me, though... ~Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Nitterauer Sent: Wednesday, November 24, 2004 12:39 PM To: [EMAIL PROTECTED] Subject: RE: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses) I changed my scan line to: SCANFILE C:\Progra~1\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /ARCHIVE=3 /DUMB /REPORT=report.txt The errors in the log file are gone and the scanner is trapping more viruses. Not sure why removing /NOMEM /NOBOOT /NOFLOPPY makes any difference. I cannot see where these are supported command parameters for fpcmd.exe Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses) Any ideas on how I might change my configuration so this doesn't happen? Have you tried uninstalling and reinstalling? If I recall correctly, old versions of F-Prot that were installed with the RealTime Protector had to be uninstalled and then re-installed with the RealTime Protector disabled (just reinstalling without uninstalling first wouldn't work). It sounds like 3.16 may be automatically installing the RealTime Protector. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail scanned for viruses by CENTRIC INTERNET SERVICES] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
- Original Message - From: Jim Nitterauer [EMAIL PROTECTED] I will try that. Yes, I checked to make sure. I also looked at the supported options for fpcmd.exe The following are not supported: /nomem /noboot /nofloppy Are these soemthing that you have indluced within Declude? We know that the /nofloppy switch is not supported with fpcmd. And it appears that the /nomem switch is irrelevant as memory is not scanned whether the switch is used or not (but does not complain if used). However, the /noboot switch is still supported and needed in order to not scan the boot sectors with each message scanned. Here is the proof: With /noboot switch: == Search: message.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /SERVER /REPORT=report.txt /NOBREAK /SILENT /NOBOOT /NOMEM /AI /PARANOID /SAFEREMOVE Memory was not scanned. Hard disk boot sectors were not scanned. Without /noboot switch: == Search: message.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /SERVER /REPORT=report.txt /NOBREAK /SILENT /AI /PARANOID /SAFEREMOVE Memory was not scanned. No viruses were found in MBRs or hard disk boot sectors. Notice the last line of each scan report. If you do not use the /noboot switch, the boot sectors will be scanned with each message that is scanned - probably not what you want. In both cases, with and without the /nomem switch, it says the Memory was not scanned. However, it does not complain that the switch is used, so I would continue to use it. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses)
Thanks for the clarification. Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Wednesday, November 24, 2004 2:16 PM To: [EMAIL PROTECTED] Subject: Re: F-prot 3.16 real time protector (was: RE: [Declude.Virus] Not detecting viruses) - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] I will try that. Yes, I checked to make sure. I also looked at the supported options for fpcmd.exe The following are not supported: /nomem /noboot /nofloppy Are these soemthing that you have indluced within Declude? We know that the /nofloppy switch is not supported with fpcmd. And it appears that the /nomem switch is irrelevant as memory is not scanned whether the switch is used or not (but does not complain if used). However, the /noboot switch is still supported and needed in order to not scan the boot sectors with each message scanned. Here is the proof: With /noboot switch: == Search: message.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /SERVER /REPORT=report.txt /NOBREAK /SILENT /NOBOOT /NOMEM /AI /PARANOID /SAFEREMOVE Memory was not scanned. Hard disk boot sectors were not scanned. Without /noboot switch: == Search: message.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /SERVER /REPORT=report.txt /NOBREAK /SILENT /AI /PARANOID /SAFEREMOVE Memory was not scanned. No viruses were found in MBRs or hard disk boot sectors. Notice the last line of each scan report. If you do not use the /noboot switch, the boot sectors will be scanned with each message that is scanned - probably not what you want. In both cases, with and without the /nomem switch, it says the Memory was not scanned. However, it does not complain that the switch is used, so I would continue to use it. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Not detecting viruses
Hmmm...the log entry you indicated is suggesting that you either have the real-time protector enabled, or perhaps you have a script running that cleans up the spool directory. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 1:27 PM Subject: RE: [Declude.Virus] Not detecting viruses Darin, The real time protector is not installed. Thanks Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, November 24, 2004 12:21 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Are you using the F-prot real-time protector? If so, you should disable it. Darin. - Original Message - From: Jim Nitterauer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 12:49 PM Subject: RE: [Declude.Virus] Not detecting viruses Hello. I made the required changes but now suddenly get the following in the VIRUS log: 11/24/2004 11:46:20 Qc8de001001d4d5de MIME file: [text/html][7Bit; Length=844 Checksum=76503] 11/24/2004 11:46:20 Qc8de001001d4d5de 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the IMail directory or sub-directories. 11/24/2004 11:46:20 Qc8de001001d4d5de Scanned: Virus Free [MIME: 2 2192] Any ideas Jim Nitterauer President Creative Data Concepts Limited, Inc. 3 W. Garden Street Suite 326 Pensacola, FL 32502 http://www.creativedata.net 850-434-7645 800-607-6168 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 24, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Not detecting viruses Downloaded F-Prot 3.16 yesterday and changed our configuration accordingly (I think). I've got something messed up. Not detecting viruses. Did you switch from F-Prot.exe to fpcmd.exe? If so, you'll need to remove the /NOBOOT switch from the SCANFILE line in your virus.cfg file. The log shows virus free on every message. Have you sent the test eicar.com file through? If so, what does the log file show for it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] - [This E-mail scanned for viruses courtesy of Creative Data Concepts http://www.creativedata.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
