If I want to skip the virus W32/Sobig.A@mm (that is the name with which
f-prot is recognizing it), it is OK to add this line:

SKIPIFVIRUSVIRUSNAME Sobig

or it should be:

SKIPIFVIRUSVIRUSNAME Sobig.A@mm
The SKIPIFVIRUSNAMEHAS option just looks for a partial match, so either one would work. However, I would recommend the "SKIPIFVIRUSNAMEHAS Sobig", as that will work with future variants as well, should any occur (which is likely in this case).
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.

Reply via email to