I haven't checked today's results with fpcmd 3.16f, but here are
yesterday's quick stats with fpcmd 3.16e
8 W32/[EMAIL PROTECTED]
3 W32/[EMAIL PROTECTED]
27 W32/[EMAIL PROTECTED]
1 W32/[EMAIL PROTECTED]
10 W32/[EMAIL PROTECTED]
9 W32/[EMAIL PROTECTED]
81 W32/[EMAIL PROTECTED]
So, yes, Sober is detected by at least 3.16f ... and going the extra
mile, I've just looked up a few samples from yesterday's log and scanned
those manually with fpcmd, and sure enough, 3.16f also detects them and
produces the same output.
Perhaps you are not seeing Sober hits in Declude virus because you're
using the AVAFTERJM setting and your Declude JunkMail is doing a
fantastic job of catching them as spam before your Declude Virus would
get called.
Andrew.
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of J Porter
> Sent: Friday, January 06, 2006 7:53 PM
> To: [email protected]
> Subject: Re: [Declude.Virus] Sober.z
>
> Yep... I upgraded to FProt 3.16e and noticed the slowdown. I
> thought it was a problem with that version, so I upgraded to
> the 3.16f which was released today. Still no Sober viruses caught.
>
> I'm still wondering if I should go back to 3.16d. Anyone
> seeing Sober caught with these last 2 updates of F-Prot??
>
> ~Joe
>
> ----- Original Message -----
> From: "Bruce Loughlin" <[EMAIL PROTECTED]>
> To: <[email protected]>
> Sent: Friday, January 06, 2006 10:03 AM
> Subject: [Declude.Virus] Sober.z
>
>
> > Has any one else noticed that sober.z just stopped today?
> >
> > I was getting hundreds a day and now I have 0.
> > Wasn't this the day it was to morph?
> >
> > Bruce L.
> > AFM
> >
> > ---
> > [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". The archives can be found
> > at http://www.mail-archive.com.
> > ---
> > [This E-mail scanned for viruses at HNB.com]
> >
> >
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
