Re: [Declude.Virus] Second scanner

2005-11-04 Thread Nick Hayer
Hi David, Mcafee is one - the command line scanner is only $11 - if you can find a vendor to sell it to you. ClamAV is another choice and its free. I use it w/clamd. http://www.sosdg.org/clamav-win32/index.php I use all three.. -Nick David Dodell wrote: After many years of using Virus

Re: [Declude.Virus] Second scanner

2005-11-04 Thread Richard Lanard
When I upgraded to the pro version, I added ClamAV for phishing attempts (be sure to use the PRESCAN OFF directive) and AVG. The implementation of ClamAV for windows I used can be found at, ClamAV http://www.sosdg.org/clamav-win32/index.php David Dodell wrote: After many years of using

RE: [Declude.Virus] Second scanner

2005-11-04 Thread John Carter
Second the motion on ClamAV. Being free and very good against phishing, I would definitely consider it. It can be a bit of a memory hog (just a spike), there is a persistent mode that helps that. John C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [Declude.Virus] Second scanner

2005-11-04 Thread Kaj Søndergaard Laursen
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: 4. november 2005 07:22 To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Second scanner I use AVG as the second scanner and am happy with the results. Me too...

Re: [Declude.Virus] Second scanner

2005-11-04 Thread Darrell \([EMAIL PROTECTED])
I use Mcafee and it has been great they tend to be amoung the top for getting updates out quick. However, it is very resource intensive. Darrell Check out http://www.invariantsystems.com for utilities for Declude And

RE: [Declude.Virus] Second scanner

2005-11-04 Thread Hirthe, Alexander
I run both, AVG as second, Clam as third (and F-Prot as first) -Original Message- From: Kaj Søndergaard Laursen [mailto:[EMAIL PROTECTED] Sent: Friday, November 04, 2005 2:51 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Second scanner -Original

RE: [Declude.Virus] Second scanner

2005-11-04 Thread John Carter
This raises a question(s): Has anyone done any real testing of which AVs (in relation to Declude) perform the best, use the least resources, what is the best scanning order, and how many to use (how many is too many and what is the point of diminishing returns)? I realize something like this

Re: [Declude.Virus] Second scanner

2005-11-04 Thread Matt
Oh, one quick follow up. AVG at some point after that test made some changes and ruined their results. This caused me to remove that scanner. I haven't revisited this testing since then so I am just assuming that AVG is slower than it showed there. Also, there was a follow up to that thread

Re: [Declude.Virus] Second scanner

2005-11-04 Thread Scott Fisher
I use F-Prot 1, McAfee 2, Clam 3 I use the Cygwin version of clam with runclamd and runclamscan. You'll find those at http://www.smartbusiness.net/imail/declude/ runclamd runs clam as a service. much faster. runclamscan returns a virus name to Declude Don't forget this is allowable: # #

RE: [Declude.Virus] Second scanner

2005-11-04 Thread John Carter
Thanks for info and link. I was searching the archives with little success. John From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Friday, November 04, 2005 9:09 AMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] Second scanner I suppose that I might be

[Declude.Virus] OT: From Phisher to just a fish

2005-11-04 Thread Colbeck, Andrew
A 20 year old man goes from abusing phish to being abused as a fish: http://www.wired.com/news/print/0,1294,69480,00.html Andrew 8) --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.

[Declude.Virus] F-Prot zip vulnerability reported

2005-11-04 Thread Colbeck, Andrew
Ouch. F-Prot is very popular on this group. This vulnerability may never turn into an exploit, but it's better that we keep abreast of issues like this. F-Prot Antivirus Lets Remote Users Bypass the Scanning Engine with Specially Crafted ZIP Files http://isc.sans.org/diary.php?storyid=820