We are using McAfee and have had good luck using the DailyDAT files. We
manually download the zip file then extract them directly into the command
line scanner directly, never having to stop/restart the SMTP service. I find
if you then use the built-in auto up-date you will over write the dailyDAT
with their weeklyDAT file.

MikeT.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, January 29, 2002 11:33 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MISSING_REVERSE_DNS:McAfee not catching
My*Party



>I'm running McAfee with Declude and still not catching the MyParty
>virus.  Have Def 4183 with the Extra.dat file as the web site says to
>do.   When I remove a rule on the MyParty and stop/restart SMTP,  the
>virus free comes through undetected.

It may just be that McAfee isn't properly updated; we've often heard of
problems where people thought that it was updated but it wasn't.  I would
recommend taking one of the copies that got through, and manually scanning
it with McAfee to see if it gets caught.

>P.S. Have purchased F-prot.  Where do I go for info on scanning with
>more than one scanner?  Again, thanks.

You can have up to 5 different virus scanners with Declude Virus Pro.  You
add them by adding the same "SCANFILE", "VIRUSCODE", "REPORT" and "OKCODE"
lines that you would normally add, except there will be a number after them
to indicate which scanner it applies to.  So, where you might have the
following now:

         SCANFILE        C:\Scanner\scan.exe /ALL
         VIRUSCODE       13
         REPORT  Found

You might change it to:

         SCANFILE1       C:\Scanner\scan.exe /ALL
         VIRUSCODE1      13
         REPORT1 Found

         SCANFILE2       C:\Scanner2\scaner.exe
         VIRUSCODE2      3
         VIRUSCODE2      6
         REPORT2 Infection

Note that if you don't include the scanner number, "1" is assumed (so you
don't have to change the existing settings).
                                    -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to