Thanks for the replies folks, I think I may just stay with F-Prot. But one thing is still confusing me.. Why did some people get a def file on the 18th that caught netsky, but mine didn't. On the 20th, I even went so far as to re-install f-prot which initially installs a July 02 def file, and ran the updater just to make sure that I was getting the latest updated file as it was being distributed by F-Prot, and I still got the 18th def file, which according to Terry here, was catching it, but mine wasn't... Any ideas with that glitch?
>-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Smart >Business Support >Sent: Tuesday, February 24, 2004 9:28 AM >To: Mike VandeBerg >Subject: Re: [sniffer] F-Prot and netsky > >Mike, > >Tuesday, February 24, 2004 you wrote: >MV> I was wondering if anyone else is using F-prot for their virus >MV> engine in declude, and what they now think about it. Netsky was >MV> discovered on the 18th, and F-Prot actually had it posted on their >MV> website as being discovered by them on the 19th. But they didn't >MV> update their definition files to actually catch it until >early this >MV> morning. This meant that netsky ran rampant under F-Prots >nose for 6 >MV> days. I feel this is completely unacceptable, and I am going to >MV> change my virus engine this week unless someone can tell >me that there is a good reason why I shouldn't. > > This is not our experience. Here's an excerpt form our virus > reporter for the 18th. Scanner 1 is Fprot. Scanner 2 is NAI > (McAfee). So on the 18th Fprot caught 39 it identified as Netsky. > However, some of these were corrupted. All in all I'm happy with > F-prot but I see enough difference to run 2 and might add a 3rd: > >> From: 02/18/2004 00:00:30 Thru 02/18/2004 23:59:36 Log files: >> vir0218.log >> >> Scanner 1 Virus names >> VBS/Haptime.F = 1 >> W32/[EMAIL PROTECTED] = 4 >> W32/[EMAIL PROTECTED] (corrupted) = 1 >> W32/[EMAIL PROTECTED] = 1 >> W32/[EMAIL PROTECTED] = 1 >> W32/[EMAIL PROTECTED] = 5 >> W32/[EMAIL PROTECTED] = 39 >> >> Scanner 1 Days >> 02/18/2004 = 52 >> >> Scanner 2 Virus names >> VBS/[EMAIL PROTECTED] virus = 1 >> W32/[EMAIL PROTECTED] virus = 4 >> W32/Bugbear.b.dam virus = 1 >> W32/[EMAIL PROTECTED] virus = 1 >> W32/[EMAIL PROTECTED] virus = 1 >> W32/[EMAIL PROTECTED] virus = 3 >> W32/[EMAIL PROTECTED] virus = 2 >> W32/[EMAIL PROTECTED] virus = 14 >> W32/Sober!data trojan = 3 >> >> Scanner 2 Days >> 02/18/2004 = 30 > > > > > > >Terry Fritts > > >This E-Mail came from the Message Sniffer mailing list. For >information and (un)subscription instructions go to >http://www.sortmonster.com/MessageSniffer/Help/Help.html >--- >[This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
