I also use a dual virus scan for checking my messages. My primary scanner is PCSCAN and secondary is F-Prot.
I wrote this cludge of a VB program to fix the report file so that declude
could report the right virus name from PCSCAN. Here is the code for those
that are interested. Attached is the exe.
My VScan batch file that declude calls....
@ECHO OFF
REM skip trend
rem GOTO FPROT
:TREND
REM ---
TREND ---------------------------------------------------------------------
START /WAIT D:\VSCAN\TREND\PCSCAN.EXE %1 /A /Z /NM /NB /NC /R=%1RPT.TXT
REM --
IF ERRORLEVEL 1 GOTO ERR1
GOTO JUMP1
:ERR1
ECHO Trend: %ERRORLEVEL% >> D:\VSCAN\ERRORLVL.LOG
:JUMP1
REM --
IF ERRORLEVEL 23 GOTO GOON1
IF ERRORLEVEL 22 GOTO FIX1
GOTO GOON1
:FIX1
REM Build a REPORT.TXT that Declude can handle
START /WAIT D:\VSCAN\TREND\DECLUDEFIX.EXE %1RPT.TXT %ERRORLEVEL%
GOTO VIRUSFOUND
REM ---
TREND ---------------------------------------------------------------------
:GOON1
DEL /Q %1RPT.TXT
REM skip FPROT checking for now.
REM GOTO GOON2
:FPROT
REM ----
FPROT ---------------------------------------------------------------------
D:\VSCAN\FPROT\F-PROT.EXE %1 /PACKED /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY
/NOBOOT /DUMB /REPORT=REPORT.TXT
REM --
IF ERRORLEVEL 1 GOTO ERR2
GOTO JUMP2
:ERR2
ECHO FPROT: %ERRORLEVEL% >> D:\VSCAN\ERRORLVL.LOG
:JUMP2
REM --
IF ERRORLEVEL 8 GOTO VIRUSFOUND
IF ERRORLEVEL 7 GOTO GOON2
IF ERRORLEVEL 6 GOTO VIRUSFOUND
IF ERRORLEVEL 4 GOTO GOON2
IF ERRORLEVEL 3 GOTO VIRUSFOUND
REM ----
FPROT ---------------------------------------------------------------------
:GOON2
GOTO END
:VIRUSFOUND
rem D:\VSCAN\AIASK.EXE "Wait" "." /T=20
D:\VSCAN\ERRORLVL.EXE 254
:END
VB Code -- Declude Fix
Option Explicit
Private Declare Sub ExitProcess Lib "kernel32" (ByVal uExitCode As Long)
'===========================================================================
=======
Public Sub Main()
On Error Resume Next
Dim CmdLine As String, xStr As String, x As Long, y As Long
Dim VName As String, FName As String, CmdLines() As String
Dim ErrNum As Long
CmdLine = Command
CmdLines = Split(CmdLine, " ")
ErrNum = Val(CmdLines(1))
Open CmdLines(0) For Input As #1
Open "REPORT.TXT" For Output As #2
Print #2, "Declude Report Fix"
Print #2, ""
Do While Not EOF(1)
Line Input #1, xStr
x = InStr(1, xStr, "Found a virus '")
If x > 0 Then
x = InStr(1, xStr, "'")
y = InStr(x + 1, xStr, "'")
VName = Mid(xStr, x + 1, y - x - 1)
x = InStr(1, xStr, "D:\")
y = InStr(x, xStr, " ")
FName = Mid(xStr, x, y - x)
Print #2, "File: " & FName & " Infection: " & VName
End If
Loop
Print #2, ""
Print #2, "Done"
Close #1
Kill CmdLines(0)
Close #2
ExitProcess (ErrNum)
End Sub
'===========================================================================
=======
-Bill Doyle
----- Original Message -----
From: "Jerry Murdock" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 08, 2002 7:43 PM
Subject: HELO:Re: [Declude.Virus] Virus Scanner
> NOD32 has uncluttered server licensing at $300. Same for Kaspersky but at
> $560. Not sure how compatible with Declude either of the report formats
are.
>
> Norman is decent and will install, but licensing may be an issue.
>
> Trend's PCScan is freely available via their emergency disk download, with
> no published restrictions on it's use. Whether it's OK to use or not is
a
> matter for a lawyer. It's report format is not compatible with Declude
> though. It works OK, but Declude will report the virus as unknown.
99.9+%
> of the time F-Prot catches infections and my Declude notifications include
> the virus name.
>
> At my Declude site, I'm using F-Prot as my first scanner, and PCScan with
> the latest beta patterns as the second. On the desktops we're running
> Trend, so licensing isn't an issue.
>
> Jerry
>
> ----- Original Message -----
> From: "John Tolmachoff" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, July 08, 2002 5:21 PM
> Subject: [Declude.Virus] Virus Scanner
>
>
> OK, so now I am going to throw this question out there.
>
> Aside from F-Prot, which other low cost virus scanners are Declude users
> using?
>
> John Tolmachoff
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA 92835
> www.reliancesoft.com
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". You can E-mail
> [EMAIL PROTECTED] for assistance. You can visit our web
> site at http://www.declude.com .
>
DecludeFix.zip
Description: Zip compressed data
