----- Original Message -----
Sent: Friday, June 14, 2002 3:25 AM
Subject: [Declude.Virus]
NJABL:Declude/MaCaphee combo not catching virus
I have declude/MaCaphee loaded, below is the declude cfg
file. My setup is missing Klez virus and few others. I manualy scanned the
spool and user directories this AM and found 36 virus. 1100 users.
Any help or ideas would be greatly appreciated.
DANO
#
# Declude Virus configuration file
#
CODE
deleted for example
# The "####" in the LOGFILE option automatically gets
replaced with the month/date
LOGFILE
E:\IMAIL\spool\vir####.log
LOGLEVEL
LOW
CONSOLE OFF
#
# SCANFILE is the location of the command-line virus
scanner. Note that it
# must include the full path. VIRUSCODE is the
code that scanner returns if
# it finds a virus.
#
SCANFILE
C:\progra~1\networ~2\comman~1\Scan.exe /ALL /NOMEM /NOBOOT /SILENT
/UNZIP
VIRUSCODE 13
# VIRDIR is the directory to move E-mails with viruses; by
default,
# it is set to 'virus' (\IMail\spool\virus).
VIRDIR E:\IMail\spool\virus
# The MAXATONCE option limits the number of AV
processes. For example,
# MAXATONCE 1 will only allow 1 AV process to
run at once (IE for licensing
# purposes). A value of 0 (or
commenting it out) allows unlimited processes
# to run at the same
time.
MAXATONCE 0
#
# The following options allow you to limit scanning to
only incoming or outgoing
# E-mail.
#
INCOMING ON
OUTGOING ON
#
# The ONACCESS option should be set to OFF unless you
have an on-access virus scanner
# that will be deleting attachments with
viruses.
#
ONACCESS OFF
#
# The SCANNERTIMEOUT option lets you choose the number
of seconds that Declude will
# wait for the virus scanner to finish.
The minimum value is 10 seconds. Most
# scanners will not need to
take that long. This option is mainly to prevent
# defective scanners
(that never finish) from interfering with your outgoing E-mail.
# Raising
this will NOT help if your virus scanner always times out.
#
SCANNERTIMEOUT 60
#
# The SKIPEXT option will let you skip scanning of
certain file extensions. For
# example, a GIF file can't contain a
virus, so there is no need to scan it.
#
SKIPEXT GIF
SKIPEXT TXT
SKIPEXT JPG
SKIPEXT MPG
SKIPEXT PNG
#
# The BANEXT option will let you ban file
extensions. E-mails containing attachments
# with these file
extensions will be quarantined, and if you have a BANnotify.EML file,
# it
will be sent out.
#
#BANEXT scr
#BANEXT pif
#
# Declude Virus Pro can pre-scan HTML files. If no
dangerous code is detected, the
# virus scanner will not get called.
This can significantly cut down on CPU usage.
#
PRESCAN OFF
#
# Declude Virus can block treat files using CLSID extensions as
viruses. This type of
# extension will force a certain type of
program to be run, while making the file appear
# to be a .TXT or other
safe file. There is no known legitimate reason to send this
# type of
file through E-mail.
#
BANCLSID ON
#
# The FOOTER lines will add a footer to the bottom of E-mails that
are scanned. This may
# not be visible if you send HTML or
attachments with the E-mail.
#
FOOTER ---
FOOTER [This E-mail scanned for
viruses by Declude Virus]
#
# The DELETEVIRUSES option, when set to ON, will delete viruses,
rather than quarantine them.
# It is recommended to leave this at
OFF.
#
DELETEVIRUSES OFF
#
# The DELIVERERRORS option, when set to ON, will treat errors from
the virus scanner as if no
# virus was found. When set to ON, this
could cause viruses to get through in rare situations,
# but will also
prevent legitimate mail from being quarantined due to an error in the
scanner.
# It is recommend to leave this at ON.
#
DELIVERERRORS ON
#
# The BANCRVIRUSES option will automatically treat E-mail with
malformed headers that could
# contain a virus as if they did contain a
virus. It is strongly recommended that you keep
# this set to ON;
otherwise, viruses could slip through.
#
BANCRVIRUSES ON
