On this same subject. If you are using Fprot and have configured it exactly as you recommend on the WEBSITE will an Excel file with a dangerous Macro be detected?
IE is there a middle ground with FPROT? I currently have /SERVER in my commandline and Viruscode 8 in my config (see below) because I did not want infected Excel files passing. But I do not want to block every Excel/Word file just because it has a macro. Alternatively if an Excel file that is NOT infected but contains a macro is enclosed within a ZIP file with these same settings (that I am using) will it also block it? TIA Doug Snippet of my Virus.cfg------------------------------ SCANFILE C:\Program Files\FSI\f-prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOBOOT /DUMB /SERVER /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 VIRUSCODE 8 REPORT Infection -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, April 13, 2004 8:00 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] getting this in my logfile >04/13/2004 11:21:23 Qb1072b82012a066d Could not find parse string >Infection in report.txt >04/13/2004 11:21:23 Qb1072b82012a066d Error 8 in virus scanner 1. >04/13/2004 11:21:23 Qb1072b82012a066d Scanned: Error in virus scanner. >[MIME: 2 270831] > >the mail with attachment are being hold > >Its a mail with an excel document with macro's but no virus > >Running the latest f-prot, and a the latest interim relase, anyone >having >any idea why or what happens It sounds like you set up F-Prot to detect "suspicious files" -- which will block most files with macros in them. You need to switch back to the default settings (unless you are OK blocking files with macros in them). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
