My configuration is catching it. I've attached the entire configuration file with my email address and licence munged. I've also attached what my log lines look line when the virus is caught.
Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Sullivan Sent: Wednesday, February 02, 2005 9:36 AM To: [email protected] Subject: Re[10]: [Declude.Virus] testvirus.org #22 Sorry to revive this old thread. But I just had a customer report that 22 is still getting through. Could someone that's catching this with F-prot please share your configs. I've got Declude 1.82 F-Prot 3.16 with the following virus.cfg: SCANFILE P:\Progra~1\fsi\f-prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /DUMB /REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 VIRUSCODE 8 REPORT Infection: PRESCAN OFF BANCLSID ON BANPARTIAL ON DELIVERERRORS ON BANCRVIRUSES ON -- Best regards, David mailto:[EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
02/02/2005 10:00:11 Q14fe0ca90028970d Scanner 1: Virus=EICAR_Test_File Attachment=eicar.zip [25] O 02/02/2005 10:00:11 Q14fe0ca90028970d File(s) are INFECTED [EICAR_Test_File: 3] 02/02/2005 10:00:16 Q14fe0ca90028970d Scanned: CONTAINS A VIRUS [MIME: 2 939] 02/02/2005 10:00:16 Q14fe0ca90028970d From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 206.158.107.157] 02/02/2005 10:00:16 Q14fe0ca90028970d Subject: Virus Scanner Test #22
virus.cfg
Description: virus.cfg
