[Declude.Virus] F-Prot 3.14e Settings

2004-03-19 Thread Bill Newberg
Scott,

What are the recommended settings for 3.14e?

Should we add /ARCHIVE=5/SERVER/PARANOID? Anything else?

Thanks,

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] AVG Updating

2004-02-25 Thread Bill Newberg
I am adding AVG on a trial basis as a third scanner with F-Prot and McAfee.
In the create scheduled update settings, there is a choice between Priority
Update, Recommended Update and Optional Update. Does anyone know which
setting will automatically download ALL updates for AVG?

BTW - Matt, thank you for the info on AVG.

Thank you,

Bill 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Pentagon

2003-08-22 Thread Bill Newberg
The Pentagon would never buy Declude. It's not pricey enough, it's too
straight forward and easy to use, you don't have to hire a consultant to
study it for several million dollars, and it's name is not Pentagon proper.
Perhaps Scott can rename it to Declude Electronic Communication Attack
Software Defense System and become a consultant for the government
Sorry, I couldn't resist.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] McAfee Enterprise 7.0 not picking upSobig.F

2003-08-21 Thread Bill Newberg
Scott,

Unfortunately (actually a good thing), all the virus e-mails I have left in
the \virus directory are bounces from other servers. I don't have a Sobig.F
attachment available to test. Once I receive one, I'll re-test.

Thanks,

Bill

 -- Original Message --
 From: R. Scott Perry [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 Date:  Thu, 21 Aug 2003 14:59:18 -0400
 
 
 I did that with eicar and the On-Demand Scanner picked it 
 up. However, 
 when I did it with Sobig.F, there was no attachment. Then I noticed 
 that it was a bounced message from another server (not using 
 SKIPIFVIRUSNAMEHAS). I'm now wondering if that is why McAfee 
 On-Demand/Declude is not picking it up, because the virus is part of 
 the bounced message and it appears to not be executable. However, 
 F-Prot and McAfee On-Access both detect Sobig.F in the SMD file. ??
 
 Most AV programs will not detect corrupt, non-viable 
 variants, which often 
 includes bounce messages (because those bounce messages are 
 usually truncated).
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail 
 mailservers. Declude Virus: Catches known viruses and is the 
 leader in mailserver 
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] McAfee Enterprise 7.0 not picking up Sobig.F

2003-08-20 Thread Bill Newberg
I use two scanners, F-Prot and McAfee Enterprise 7.0. F-Prot is picking up
Sobig.F, but McAfee is not. I have the latest definitions, 4288, and the
latest engine 4.2.60. When I send the test eicar file as a zip, both
scanners detect it, so I know both scanners are functioning. Does anyone
have any ideas as to why my McAfee is not detecting Sobig.F? 

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Sobig.F

2003-08-19 Thread Bill Newberg
F-Prot is catching Sobig.F, but McAfee is still not picking them up. Looks
like a reversal of last weeks problem with F-Prot not catching the virus and
McAfee catching it. I'm glad I'm running dual scanners. 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] F-Prot 3.12c

2002-12-04 Thread Bill Newberg
Has anyone tested F-Prot 3.12c yet? Any problems?

Thanks,

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] F-Prot AntivirusT version 3.12

2002-03-21 Thread Bill Newberg

I upgraded to 3.12 and everything appears to be working fine.

- Original Message -
From: David Dodell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 21, 2002 12:36 AM
Subject: [Declude.Virus] F-Prot AntivirusT version 3.12


 Has anyone upgraded to version 3.12 yet?  Does it work ok with
 Declude?

 David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] Fw: New version of F-PROT (3.11b)

2001-12-21 Thread Bill Newberg

I upgraded this morning to 3.11b and everything appears to be working fine.
I am not receiving the error message.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
Sent: Friday, December 21, 2001 12:53 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)


I dowloaded and installed 3.11b
fprot dos  declude are ok, but i cant run fprot windows anymore
get the message can't run more than one instance of the program
I am not running any instance.

Anyone tried 3.11b and made it work ?

- Original Message -
From: Serge Dergham [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, December 21, 2001 7:35 PM
Subject: Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)


 Hi Jerry

 How do we find out what fprot engine is running (for dos)? is there a
 command line switch to show the version ?

 thanks

 - Original Message -
 From: Jerry Murdock [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, December 21, 2001 7:14 PM
 Subject: [Declude.Virus] Fw: New version of F-PROT (3.11b)


  FYI, for those that don't auto-update the engine via FTP:
 
  I don't think all the mirrors are updated yet.
 
  Jerry
 
  - Original Message -
  From: fp-admin [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, December 21, 2001 11:24 AM
  Subject: New version of F-PROT (3.11b)
 
 
  
  
  
   This is a short, automatically generated message, to let you know that
a
 new
   version of F-PROT Antivirus for DOS, has been made available.
   That version is: 3.11b
   This version should be available on ftp sites soon and if possible,
 please
   use ftp sites nearer to you netwise than the mail-server located at
  f-prot.com.
   (Please replace the XXX below with the proper version number.)
  
   Please see also http://www.f-prot.com/f-prot/obtaining.html for
   pointers.
  
   For example:
   ftp://ftp.f-prot.com/pub/fp-XXX.zip
  
  
   For further help about the mail-server, send a message to
   [EMAIL PROTECTED] containing the following in the body:
   send help
   You will then receive a text about the mail-server and the available
  commands.
  
  
   If you would like to contact a human being for further questions or
for
 more
   information, just send email to:
  [EMAIL PROTECTED]
  
  
 

 --
 --
  
  
   For your convenience, the PGP signature for the zip file follows:
   (It is the same as the output from 'finger [EMAIL PROTECTED]')
  
   -BEGIN PGP MESSAGE-
   Version: 2.6.2i
  
   iQCVAwUAPCIJGuh8c/eece0pAQEGGwQA0CsIaAzhS/251uhm613uqZAQ8GWRTQBJ
   BIZWA/5Mm90DRxqpXUGcMUXInol48AFqXR0kZ6Y9GfxaV9f0JBHPyi1fWQnJ03d7
   OQK3E3OzCZcEcjn4PU9yg4XjxqJ065AtQn93BbZm9x4Ie5w3++SeuisGOziN+TRw
   j//VcON7AGI=
   =Q25f
   -END PGP MESSAGE-
  
  
  
 
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.  You can E-mail
  [EMAIL PROTECTED] for assistance.  You can visit our web
  site at http://www.declude.com .
 
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .