[Declude.Virus] eTrust Switches [was F-Prot Switches]
Is anyone using an etrust product for scanning? We now have one of the etrust products installed on our mailserver, and I don't have any feeling -- good OR bad -- about it. What are etrusters using for switches and configuration? I'm running it as scanner3, behind f-prot and clamAV. Thanks, John S --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] F-Prot Switches
I think that in the context of scanning E-mail, where executables are normally banned, this switch has far less risk of a false positive. Generally, virus scanners in Declude are only run on executables and _javascript_, and most executables are in fact viruses. On a desktop or server, there are far more executables that could be legitimate and the extra heuristics might be unwanted. Matt marc wrote: really rare information about the /AI Switch... just found this about "Neural network": http://www.f-prot.com/support/windows/fpwin_faq/17.html We will not use it, because increases the risk of false alarms. marc At 03:55 29.03.2006, you wrote: What is the value of the "AI" switch? I see it (and others related) explained on the F-Prot web site, but I don't understand why one would use it or not use it. Nor does it tell you what the default is. /HEUR - Uses heuristic scanning of files. /NOHEUR - Doesn't use heuristic scanning of files. /AI - Uses Neural network heuristic scanning of files. /NOAI - Doesn't use Neural network heuristic scanning of files. Original Message From: "Colbeck, Andrew" <[EMAIL PROTECTED]> Sent: Tuesday, March 28, 2006 11:53 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] F-Prot Switches #Dec-10-2004 AC Note that I've added 'ai' and 'packed' to the switches suggested in the manual. The noboot and nomem options # are not listed when you ask fpcmd.exe for help, but they are definitely in the logs. SCANFILED:\F-Prot\fpcmd.exe /ai /server /archive=5 /packed /dumb /noboot /nomem /silent /report=report.txt Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mark Reimer Sent: Tuesday, March 28, 2006 8:46 AM To: Declude.Virus@declude.com Subject: [Declude.Virus] F-Prot Switches After seeing Matt's response I'm curious what other users are using for their F-prot switches. Some of the switches Matt uses seem like they should be used but Declude does not include them in the config shown in their EVA manual. What do the majority of you all use? Mark Reimer IT Project Manager American CareSource 214-596-2464 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. [Scanned for viruses by Declude] [Scanned for viruses by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] F-Prot Switches
really rare information about the /AI Switch... just found this about "Neural network": http://www.f-prot.com/support/windows/fpwin_faq/17.html We will not use it, because increases the risk of false alarms. marc At 03:55 29.03.2006, you wrote: >What is the value of the "AI" switch? I see it (and others related) >explained on the F-Prot web site, but I don't understand why one would >use it or not use it. Nor does it tell you what the default is. > >/HEUR - Uses heuristic scanning of files. >/NOHEUR - Doesn't use heuristic scanning of files. >/AI - Uses Neural network heuristic scanning of files. >/NOAI - Doesn't use Neural network heuristic scanning of files. > > > > Original Message >> From: "Colbeck, Andrew" <[EMAIL PROTECTED]> >> Sent: Tuesday, March 28, 2006 11:53 AM >> To: Declude.Virus@declude.com >> Subject: RE: [Declude.Virus] F-Prot Switches >> >> #Dec-10-2004 AC Note that I've added 'ai' and 'packed' to the switches >> suggested in the manual. The noboot and nomem options >> # are not listed when you ask fpcmd.exe for help, but they >> are definitely in the logs. >> SCANFILED:\F-Prot\fpcmd.exe /ai /server /archive=5 /packed /dumb >> /noboot /nomem /silent /report=report.txt >> >> >> Andrew 8) >> >> >> >> > -Original Message- >> > From: [EMAIL PROTECTED] >> > [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reimer >> > Sent: Tuesday, March 28, 2006 8:46 AM >> > To: Declude.Virus@declude.com >> > Subject: [Declude.Virus] F-Prot Switches >> > >> > After seeing Matt's response I'm curious what other users are >> > using for their F-prot switches. Some of the switches Matt >> > uses seem like they should be used but Declude does not >> > include them in the config shown in their EVA manual. What do >> > the majority of you all use? >> > >> > Mark Reimer >> > IT Project Manager >> > American CareSource >> > 214-596-2464 >> > >> > >> > > > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. > >[Scanned for viruses by Declude] [Scanned for viruses by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
