Another service provided by Matt at Mailpure... I've added the 32bit as a scanner 3 in my system to compare it against the 16 bit instaleld as scanner 2. Interestingly in the first 30 minutes it detected 2 Bagle.J PIFs that the 16 bit scanner did not detect. So at first glance it appears to be faster and better.
Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 03/04/04 07:09PM >>> I should have read the previous message closer, so point the finger at me for jumping the gun totally. The 32-bit version of avgscan.exe does in fact now work (this definitely wasn't the case earlier). The switches for this should be modified when moving to the 32-bit version. I'm not positive that all of this is necessary, but here's what I'm using after researching what they did. SCANFILE2 C:\Progra~1\Grisoft\AVG7\avgscan.exe /NOMEM /NOBOOT /NOHIMEM /NOEXPORT /NOSELF /ARC /RT /ARCW /RTW /MACROW /REPORT=report.txt VIRUSCODE2 5 VIRUSCODE2 6 REPORT2 identified If others can agree on the best switches, this should probably be added to the Declude Virus manual. Matt Matt wrote: > The 32-bit version of AVG won't work because it doesn't return result > codes which Declude needs to take action. I E-mailed them about a > month ago asking about this and they said that they would add them, > probably by the end of that month. I've been meaning to follow up > with them, but I'm sure they are quite busy due to the virus storm and > encrypted zip files, trying to find a solution so I will wait a little > longer. The 16-bit command line scanner, avg.exe, is a dog in > comparison to F-Prot, it's at least three times slower and it > definitely take up much more processing power because it runs under > the NTVDM. > > The config for AVG that was shared by Jarod should also be updated. > One of the codes in there will cause Declude to treat errors as a > virus. This is how it should be for a second scanner: > > SCANFILE2 C:\Progra~1\Grisoft\AVG7\avg.exe /NOMEM /NOSELF /ARC > /REPORT=report.txt > VIRUSCODE2 5 > VIRUSCODE2 6 > REPORT2 identified > > Please note that while this info may be a little obscure to find, like > Markus said, there is a lot of repetition going on recently and these > things have most definitely been covered recently and should be > searchable in the archives. Unless you monitor this group regularly, > it is good practice to search the archives before posting a new > question. Understandably, the search function in the archives kind of > sucks. > > Matt > > > > bill.maillists wrote: > >>Scott, >> >>Can you shed some light on this? >> >>Thanks, >> >>Bill >> >>---------- Original Message ---------------------------------- >>From: "Jerod Bennett" <[EMAIL PROTECTED]> >>Reply-To: [EMAIL PROTECTED] >>Date: Thu, 4 Mar 2004 10:46:07 -0800 >> >> >> >>>I'm confused... >>> >>>I keep reading reports of the 32-bit version of AVG 7.0 don't work with >>>Declude. >>> >>>As far as I can tell, this just isn't true. I have been running avgscan.exe >>>as my second scanner for quite some time now. >>> >>>Here is my virus.cfg setup: >>> >>>SCANFILE2 C:\AVG7\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt >>>VIRUSCODE2 2 >>>VIRUSCODE2 6 >>>REPORT2 identified >>> >>>And here is a report sample: >>> >>>03/03/2004 00:04:48 Q919d01db01841df5 Scanner 1: Virus=: W32/[EMAIL PROTECTED] >>>Attachment=me.scr [16] I >>>03/03/2004 00:04:49 Q919d01db01841df5 Scanner 2: Virus= I-Worm/Netsky.B >>>Attachment=me.scr [16] I >>>03/03/2004 00:04:49 Q919d01db01841df5 File(s) are INFECTED [: >>>W32/[EMAIL PROTECTED]: 6] >>>03/03/2004 00:04:49 Q919d01db01841df5 Deleting file with virus >>>03/03/2004 00:04:49 Q919d01db01841df5 Deleting E-mail with virus! >>>03/03/2004 00:04:49 Q919d01db01841df5 Scanned: CONTAINS A VIRUS [MIME: 2 >>>22067] >>>03/03/2004 00:04:49 Q919d01db01841df5 From: [Forged] To: [EMAIL PROTECTED] >>>[incoming from 4.12.125.74] >>>03/03/2004 00:04:49 Q919d01db01841df5 Subject: information >>> >>>I admit there were problems with the installation. The biggest problem was >>>avgscan doesn't run in English by default. You need to go into the GUI and >>>set English as the default language. >>> >>>I hope this helps. >>>-Jerod >>> >>>-----Original Message----- >>>From: [EMAIL PROTECTED] >>>[mailto:[EMAIL PROTECTED] On Behalf Of bill.maillists >>>Sent: Thursday, March 04, 2004 6:34 AM >>>To: [EMAIL PROTECTED] >>>Subject: Re: [Declude.Virus] (OT) Second Scanner >>> >>> >>>I'm running F-Prot, McAfee and as a test recently, AVG. The setup is >>>straight forward. Do not install the real-time scanner component. As far as >>>Declude is concerned, the instructions for adding a second scanner and AVG >>>are in the Declude manual. Since only the 16-bit version works with Declude, >>>it takes approximately three seconds for AVG to scan a message. That appears >>>to be the biggest drawback. I do not know when the 32-bit version will work >>>with Declude. I hope it is soon. >>> >>>Bill >>> >>>---------- Original Message ---------------------------------- >>>From: "Hank Townsend" <[EMAIL PROTECTED]> >>>Reply-To: [EMAIL PROTECTED] >>>Date: Thu, 4 Mar 2004 08:53:13 -0500 >>> >>> >>> >>>>I am thinking of adding a second virus scanner to Declude to suplement >>>>F-Prot. I am looking at AVG and was wondering which version I'd have to >>>>purchase. They have the AVG Professional Single Edition and the AVG >>>>File Server Edition. My email server is NT Server 4.0. >>>> >>>>Also, any tips on running both F-Prot and AVG on the same box? Any >>>>install tips for AVG? >>>> >>>>Thanks. >>>> >>>>Hank >>>> >>>>--- >>>>[This E-mail has been scanned for viruses.] >>>>[MGT of America, Inc.] >>>> >>>>--- >>>>[This E-mail was scanned for viruses by Declude Virus >>>>(http://www.declude.com)] >>>> >>>>--- >>>>This E-mail came from the Declude.Virus mailing list. To unsubscribe, >>>>just send an E-mail to [EMAIL PROTECTED], and >>>>type "unsubscribe Declude.Virus". The archives can be found >>>>at http://www.mail-archive.com. >>>> >>>> >>>> >>>--- >>>[This E-mail was scanned for viruses by Declude Virus >>>(http://www.declude.com)] >>> >>>--- >>>This E-mail came from the Declude.Virus mailing list. To unsubscribe, just >>>send an E-mail to [EMAIL PROTECTED], and >>>type "unsubscribe Declude.Virus". The archives can be found >>>at http://www.mail-archive.com. >>> >>>--- >>>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] >>>iVIRUSCODE2 6 >>>REPORT2 iden >>>--- >>>This E-mail came from the Declude.Virus mailing list. To >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>>type "unsubscribe Declude.Virus". The archives can be found >>>at http://www.mail-archive.com. >>> >>> >>> >>--- >>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] >> >>--- >>This E-mail came from the Declude.Virus mailing list. To >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>type "unsubscribe Declude.Virus". The archives can be found >>at http://www.mail-archive.com. >> >> >> >> > >-- >===================================================== >MailPure custom filters for Declude JunkMail Pro. >http://www.mailpure.com/software/ >===================================================== > -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
