Reply to: R. Scott Perry
Re: [Declude.Virus] 3rd Scanner Not Logging? on Tuesday 4:27:00 PM
Well I found how to make it report. Use avg.exe instead of
avgscan.exe in declude command line settings for AVG:
08/12/2003 17:45:26 Q6e00024c0264e7c1 Scanner 1: Virus=: EICAR_Test_File
Attachment=eicar.com [1] I
08/12/2003 17:45:27 Q6e00024c0264e7c1 Scanner 2: Virus= the W32/TryMem virus !!!
Attachment=eicar.com [1] I
08/12/2003 17:45:32 Q6e00024c0264e7c1 Scanner 3: Virus= EICAR_Test
Attachment=eicar.com [1] I
08/12/2003 17:45:32 Q6e00024c0264e7c1 Found a bogus .com file
08/12/2003 17:45:32 Q6e00024c0264e7c1 File(s) are INFECTED [: EICAR_Test_File: 6]
Does this mean that avgscan.exe will not work?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
----- Copy of Original Message(s): -----
>>08/12/2003 05:23:13 Qc0100ea3011071fb Scanned: Virus Free [Prescan
>>OK][MIME: 1 1678]
>>08/12/2003 05:23:19 Qc012117801167b13 MIME file:
>>[text/html][quoted-printable; Length=881 Checksum=72056]
>>08/12/2003 05:23:19 Qc012117801167b13 MIME file: KOF2002.exe [base64;
>>Length=34304 Checksum=3657899]
>>08/12/2003 05:23:21 Qc0120ea401107aa6 Scanned: Virus Free [MIME: 1 961]
>>08/12/2003 05:23:22 Qc012117801167b13 Scanner 1: Virus=: W32/[EMAIL PROTECTED]
>>Attachment=KOF2002.exe [1] I
>>08/12/2003 05:23:22 Qc012117801167b13 Scanner 2: Virus= the W32/[EMAIL PROTECTED]
>>virus !!! Attachment=KOF2002.exe [1] I
>>08/12/2003 05:23:23 Qc01a0ea80110989e Scanned: Virus Free [Prescan OK]
>>08/12/2003 05:23:25 Qc012117801167b13 File(s) are INFECTED [:
>>W32/[EMAIL PROTECTED]: 0]
>>08/12/2003 05:23:25 Qc012117801167b13 Deleting file with virus
>>08/12/2003 05:23:25 Qc012117801167b13 Deleting E-mail with virus!
>>08/12/2003 05:23:25 Qc012117801167b13 Scanned: CONTAINS A VIRUS [Prescan
>>OK][MIME: 2 35205]
>>
>>I installed AVG as a third scanner using these settings but it is not
>>showing in the virus logs... I see scanner 1 and 2 (above) but not 3.
>>Are my settings bad or does Declude discard the third scan if the
>>first two find a virus?
R> This would occur if the first two find a virus, but the third does not.
R> What I would recommend in this case is generating a debug log file using
R> the eicar.com file, and then sending it to me off-list.
R> -Scott
R> ---
R> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
R> Declude Virus: Catches known viruses and is the leader in mailserver
R> vulnerability detection.
R> Find out what you have been missing: Ask for a free 30-day evaluation.
R> ---
R> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
R> ---
R> This E-mail came from the Declude.Virus mailing list. To
R> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
R> type "unsubscribe Declude.Virus". The archives can be found
R> at http://www.mail-archive.com.
R> --
R> ActivatorMail(tm) ver.00811031 Scanned for all viruses by
R> www.activatormail.com intelligent anti-virus anti-spam service
--
ActivatorMail(tm) ver.00811031 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
