I changed my report to deal with the extra the.
I am going to leave the Report line to just say Found and monitor the
results.
Thanx to all for the info
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Andy Schmidt
> Sent: Friday, July 23, 2004 6:37 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] Extra "the" in the log file
>
> Hm,
>
> I recommend AGAINST the "Found the".
>
> McAfee is inconsistent in prepending the "the", examples from today:
>
> Scanner 1: Virus= application Exploit-MIME.gen.c. Attachment=[HTML
> segment]
> [17] I
> Scanner 1: Virus= the W32/[EMAIL PROTECTED] Attachment=report01.zip [17]
I
>
>
> Best Regards
> Andy Schmidt
>
> H&M Systems Software, Inc.
> 600 East Crescent Avenue, Suite 203
> Upper Saddle River, NJ 07458-1846
>
> Phone: +1 201 934-3414 x20 (Business)
> Fax: +1 201 934-9206
>
> http://www.HM-Software.com/
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Matt
> Sent: Friday, July 23, 2004 06:25 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.Virus] Extra "the" in the log file
>
>
> Goran,
>
> Change the REPORT line for your second scanner (McAfee) to the
following:
>
> REPORT2 Found the
>
> If you add a space following the word "the" it will also take care of
> the space. You can do the same for REPORT1 as well to get rid of the
> space.
>
> Matt
>
>
>
> Goran Jovanovic wrote:
>
> >Hi,
> >
> >I am seeing an extra "the" in the vir*.log files
> >
> >07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus=
W32/[EMAIL PROTECTED]
> >Attachment=me.zip [2] O 07/22/2004 11:56:05 Qe38302800104c34d Scanner
> >2: Virus= the W32/[EMAIL PROTECTED] Attachment=me.zip [2] O
> >
> >After the Scanner 1: Virus= it has the name of the virus
> >After the Scanner 2: Virus= it has an extra "the" then name of the
> >virus
> >
> >Scanner 1 is F-Prot
> >Scanner 2 is McAfee
> >
> >Any reason why?
> >
> > Goran Jovanovic
> > The LAN Shoppe
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus
> >(http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.Virus mailing list. To
unsubscribe,
> >just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.Virus". The archives can be found
> >at http://www.mail-archive.com.
> >
> >
> >
> >
>
> --
> =====================================================
> MailPure custom filters for Declude JunkMail Pro.
> http://www.mailpure.com/software/
> =====================================================
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To unsubscribe,
> just
> send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
