Re: [Declude.Virus] Heads up on F-Prot configuration

[Matt]

I think those results may be anecdotal.  A program wouldn't execute more slowly to the extent that you could detect it based on using either a hyphen or slash.  These arguments are read once per file, or once per session I would assume, and there's no way that the process of translating one into the other should be noticeable. The only thing that could explain a difference in speed (IMO) would be if some of the arguments were not functional with either a hyphen or slash.  I think we're talking about nanoseconds here otherwise. Matt Bill Landry wrote: Mike, I did some very basic testing using the "-" and "/" on different size files ranging from under 1mb to 50mb, and what I found was that the tests either ran at the same speed or the tests with the "/" ran a bit slower (out of ten tests I ran, 4 ran slower with the "/"). Here is one example: ====== With "-" ====== C:\Program Files\FSI\F-Prot>fpcmd.exe -AI -ARCHIVE -DUMB -NOBOOT -NOBREAK -NOMEM -PACKE D -SILENT -TYPE -REPORT=report.txt f:\SolarWinds-NetPerfMon-V6-AX100-Eval.zip C:\Program Files\FSI\F-Prot>cat report.txt Virus scanning report - 25 January 2004 @ 14:22 F-PROT ANTIVIRUS Program version: 3.14b Engine version: 3.14.7 VIRUS SIGNATURE FILES SIGN.DEF created 23 January 2004 SIGN2.DEF created 24 January 2004 MACRO.DEF created 19 January 2004 Search: -AI -ARCHIVE -DUMB -NOBOOT -NOBREAK -NOMEM -PACKED -SILENT -TYPE -RE PORT=report.txt f:\SolarWinds-NetPerfMon-V6-AX100-Eval.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /REPORT=report.txt /NOBREAK /SILENT /NOBOOT /NOMEM /AI Memory was not scanned. Hard disk boot sectors were not scanned. Results of virus scanning: Files: 1 MBRs: 0 Boot sectors: 0 Objects scanned: 2 Time: 0:14 No viruses or suspicious files/boot sectors were found. ====== With "/" ====== C:\Program Files\FSI\F-Prot>fpcmd.exe /AI /ARCHIVE /DUMB /NOBOOT /NOBREAK /NOMEM /PACKED /SILENT /TYPE /REPORT=report.txt f:\SolarWinds-NetPerfMon-V6-AX100-Eval.zip C:\Program Files\FSI\F-Prot>cat report.txt Virus scanning report - 25 January 2004 @ 14:22 F-PROT ANTIVIRUS Program version: 3.14b Engine version: 3.14.7 VIRUS SIGNATURE FILES SIGN.DEF created 23 January 2004 SIGN2.DEF created 24 January 2004 MACRO.DEF created 19 January 2004 Search: f:\SolarWinds-NetPerfMon-V6-AX100-Eval.zip Action: Report only Files: Attempt to identify files Switches: /ARCHIVE /PACKED /REPORT=report.txt /NOBREAK /SILENT /NOBOOT /NOMEM /AI Memory was not scanned. Hard disk boot sectors were not scanned. Results of virus scanning: Files: 1 MBRs: 0 Boot sectors: 0 Objects scanned: 2 Time: 0:17 No viruses or suspicious files/boot sectors were found. ===== Note the time difference. I would be curious to know what your results are like. Bill ----- Original Message ----- From: "Mike Nice" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, January 25, 2004 12:54 PM Subject: Re: [Declude.Virus] Heads up on F-Prot configuration The Help shows the commands beginning with dashes. FPCMD.EXE recognizes the dashes as commands, however it fails to remove them from the argument list and ends up scanning for the arguments as additional file specifications. Try it both ways and note the output - it says it searches for -packed, for example. Also a test shows that the /NOBOOT command is applicable to FPCMD.exe and saves scanning the boot records. Mike Nice ----- Original Message ----- From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, January 25, 2004 1:35 PM Subject: Re: [Declude.Virus] Heads up on F-Prot configuration Also, I use hyphen "-" instead of forward slash "/" because that's what is shown for the switches when doing "fpcmd /?" from the command prompt. Probably doesn't matter since both apparently work. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================