I can't get f-prot to test positive for txt files with any setting. I sent
an email to f-prot about this and if I understand their reply properly (and
I'm not certain I do) they are saying that their windows "real time" program
would catch it if you tried to execute it but otherwise it is not dangerous
so the command line passes it.
But this seems to be counter to what I was trying to do with declude so
that's why I went to Mcaffee's product.
Terry Fritts
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, February 21, 2001 8:27 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Problems with eicar.com.txt detection
>Declude stops eicar.com, eicar_com.zip and eicarcom2.zip .. but it lets
>the eicar.com.txt file get through. Why is this? Also, how do I fix it (if
>possible) .. Many thanks in advance.
That's probably because the virus scanner knows that a virus can't be run
directly with a text file. The recipient would have to intentionally
change the extension in order for it to be run. If you want to be extra
safe, you can use F-Prot's "/DUMB" switch (just add it to the SCANFILE
option in \IMail\Declude\virus.cfg), which sounds like it will scan all
extensions.
-Scott
[ This E-mail came from the Declude.Virus mailing list. To ]
[ unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ]
[ type "unsubscribe Declude.Virus yourname". You can E-mail ]
[ [EMAIL PROTECTED] for assistance. You can visit our web ]
[ site at http://www.declude.com . ]
