I believe I understand now how this works and although I haven't really
tested it I bet if I set up a test with Declude and f-prot or declude and
InnoculateIt with anna virus that it would work now with 1.14.
The reason is that declude is taking the data and decoding it before
presenting it to the virus scanner. But if I test the file from the command
line with either f-prot or InnoculateIt then they don't report a virus
because of the encoding.
Now if I have the virus in my email client and try to open it then
InnoculateIt does catch it because apparently the file must at some point be
decoded just prior to execution. Or at least that's my guess. I have no
easy way to test f-prot.
Scott says that declude prior to version 1.14 was sometimes failing on
certain encoding. So I suspect that if I tested right now with vesion 1.14
and f-prot it would work.
However, I've already switched to Mcaffee and it seems to be doing fine so
I'm leaving all well enough alone.
Terry
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jerry Murdock
Sent: Friday, February 16, 2001 10:17 PM
To: [EMAIL PROTECTED]
Subject: DUL: Re: [Declude.Virus] Problem with f-prot
The Declude/Fprot catches Anna if running Declude 1.14 for me.
What version F-Prot are you running. What are the dates on your .def files?
----- Original Message -----
From: "OurLists" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 16, 2001 2:16 PM
Subject: RE: [Declude.Virus] Problem with f-prot
> I have the latest everything with all of them. But the problem I have
with
> both f-prot and cai innoculateit is that if I run them from the command
line
> against any variation of anna then neither product reports a virus. And
> that's running quite a few different arguemnt combinations although I
> certainly wouldn't say I'd exhausted all possible combinations.
>
> Once it was finally updated for the 2nd time on Monday InnoculateIt
refused
> me to permission to open (or mail or antyhing else) the same anna
attachment
> that it still will not report from command line. So I assume something in
> their program is detecting the environment and that makes a difference. I
> don't have the f-prot Window's program, only the command line. So I don't
> know if it works similarly or not. I would like to know if someone has
made
> it work and if so what arguments you gave it. I understand the reasoning
> that as a text file they aren't dangerous but for working with declude it
> does not seem valid to me.
>
> I assume if I can't get a program to report anything to me from command
line
> that it would not report anything to declude or is there some way that
> declude interfaces that I am missing?
>
>
> Terry
[ This E-mail came from the Declude.Virus mailing list. To ]
[ unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ]
[ type "unsubscribe Declude.Virus yourname". You can E-mail ]
[ [EMAIL PROTECTED] for assistance. You can visit our web ]
[ site at http://www.declude.com . ]
