[Declude.Virus] NJABL:Declude/MaCaphee combo not catching virus

[Dan Olsen \( DANO \)]

I have declude/MaCaphee loaded, below is the declude cfg file. My setup is missing Klez virus and few others. I manualy scanned the spool and user directories this AM and found 36 virus. 1100 users.   Any help or ideas would be greatly appreciated.   DANO      # # Declude Virus configuration file #   CODE            deleted for example   # The "####" in the LOGFILE option automatically gets replaced with the month/date   LOGFILE         E:\IMAIL\spool\vir####.log LOGLEVEL        LOW CONSOLE  OFF   # # SCANFILE is the location of the command-line virus scanner. Note that it # must include the full path.  VIRUSCODE is the code that scanner returns if # it finds a virus. #   SCANFILE        C:\progra~1\networ~2\comman~1\Scan.exe /ALL /NOMEM /NOBOOT /SILENT /UNZIP VIRUSCODE 13   # VIRDIR is the directory to move E-mails with viruses; by default, # it is set to 'virus' (\IMail\spool\virus).   VIRDIR  E:\IMail\spool\virus   # The MAXATONCE option limits the number of AV processes.  For example, # MAXATONCE 1 will only allow 1 AV process to run at once (IE for licensing # purposes).  A value of 0 (or commenting it out) allows unlimited processes # to run at the same time.   MAXATONCE 0   # # The following options allow you to limit scanning to only incoming or outgoing # E-mail. #   INCOMING ON OUTGOING ON   # # The ONACCESS option should be set to OFF unless you have an on-access virus scanner # that will be deleting attachments with viruses. #   ONACCESS OFF   # # The SCANNERTIMEOUT option lets you choose the number of seconds that Declude will # wait for the virus scanner to finish.  The minimum value is 10 seconds.  Most # scanners will not need to take that long.  This option is mainly to prevent # defective scanners (that never finish) from interfering with your outgoing E-mail. # Raising this will NOT help if your virus scanner always times out. #   SCANNERTIMEOUT 60   # # The SKIPEXT option will let you skip scanning of certain file extensions.  For # example, a GIF file can't contain a virus, so there is no need to scan it. #   SKIPEXT  GIF SKIPEXT  TXT SKIPEXT  JPG SKIPEXT  MPG SKIPEXT  PNG   # # The BANEXT option will let you ban file extensions.  E-mails containing attachments # with these file extensions will be quarantined, and if you have a BANnotify.EML file, # it will be sent out. #   #BANEXT  scr #BANEXT  pif   # # Declude Virus Pro can pre-scan HTML files.  If no dangerous code is detected, the # virus scanner will not get called.  This can significantly cut down on CPU usage. #   PRESCAN  OFF   # # Declude Virus can block treat files using CLSID extensions as viruses.  This type of # extension will force a certain type of program to be run, while making the file appear # to be a .TXT or other safe file.  There is no known legitimate reason to send this # type of file through E-mail. #   BANCLSID ON   # # The FOOTER lines will add a footer to the bottom of E-mails that are scanned.  This may # not be visible if you send HTML or attachments with the E-mail. #   FOOTER  --- FOOTER  [This E-mail scanned for viruses by Declude Virus]   # # The DELETEVIRUSES option, when set to ON, will delete viruses, rather than quarantine them. # It is recommended to leave this at OFF. #   DELETEVIRUSES OFF   # # The DELIVERERRORS option, when set to ON, will treat errors from the virus scanner as if no # virus was found.  When set to ON, this could cause viruses to get through in rare situations, # but will also prevent legitimate mail from being quarantined due to an error in the scanner. # It is recommend to leave this at ON. #   DELIVERERRORS ON   # # The BANCRVIRUSES option will automatically treat E-mail with malformed headers that could # contain a virus as if they did contain a virus.  It is strongly recommended that you keep # this set to ON; otherwise, viruses could slip through. #   BANCRVIRUSES ON