>I saved an email message infected with Sircam virus as a .eml file, and
>tried to scan it with different AV programs.
>of all what I used (Fprot, Mcafee, Sophos, Norton), only norton detected
>the virus.
That's because the .eml file you saved isn't a virus, it's an E-mail. An
E-mail can contain a virus, but an E-mail file can't be executed. F-Prot
doesn't detect a virus because it can't be run in that form. When you save
the E-mail as an .eml file, there are many different encoding formats that
could be used, and a standard desktop scanner doesn't normally understand them.
>What does that mean ? if I use Mcafee or fprot with declude, they wont
>detect sircam ?
They will. Declude will decode the attachment, so F-Prot (or the others)
can detect it.
>Are you having success intercepting sircam, when using declude with Fprot
>? dos or windows version ?
>what about Mcafee ?
When F-Prot first came out, people with F-Prot (either DOS or Windows)
detected it immediately; McAfee detected it after an update to the virus
definitions.
>declude website mentioned a "multiplatform" version of virussacn that can
>run on NT server, wasn't able to find such a product. can anyone point me
>to the right direction ?
There's a recent E-mail to this list that explains about McAfee and the
product that works on NT server but they don't like to sell. If you really
want to find it, either call them and ask for "One copy of the
MultiPlatform version of VirusScan" or "One copy of the VirusScan Security
Suite" (but be prepared for them to try selling you a $6,000 product
instead of a $60 product). Or, online, first go to
http://www.mcafeeb2b.com, move the mouse over "Products" and select "File
Server Protection". Then, go down and click on "NetShield for NT", then on
the right-hand side of the screen click "Buy", then go down to "VirusScan
Security Suite". They used to let you buy one copy at a time, but they
require orders of 5+ copies now to order online.
> will declude tech support help us choose configure and test the AV product ?
Yes, we will. Since we act as the "middleman" getting IMail and the
scanner to communicate with each other, we take care of issues with
Declude, as well as issues getting Declude to interact with IMail and/or
the scanner.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
