RE: [Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Goran Jovanovic
I changed my report to deal with the extra the.

I am going to leave the Report line to just say Found and monitor the
results.

Thanx to all for the info


 
 Goran Jovanovic
 The LAN Shoppe

 

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Andy Schmidt
> Sent: Friday, July 23, 2004 6:37 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] Extra "the" in the log file
> 
> Hm,
> 
> I recommend AGAINST the "Found the".
> 
> McAfee is inconsistent in prepending the "the", examples from today:
> 
> Scanner 1: Virus= application Exploit-MIME.gen.c. Attachment=[HTML
> segment]
> [17] I
> Scanner 1: Virus= the W32/[EMAIL PROTECTED] Attachment=report01.zip [17]
I
> 
> 
> Best Regards
> Andy Schmidt
> 
> H&M Systems Software, Inc.
> 600 East Crescent Avenue, Suite 203
> Upper Saddle River, NJ 07458-1846
> 
> Phone:  +1 201 934-3414 x20 (Business)
> Fax:+1 201 934-9206
> 
> http://www.HM-Software.com/
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Matt
> Sent: Friday, July 23, 2004 06:25 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.Virus] Extra "the" in the log file
> 
> 
> Goran,
> 
> Change the REPORT line for your second scanner (McAfee) to the
following:
> 
> REPORT2Found the
> 
> If you add a space following the word "the" it will also take care of
> the space.  You can do the same for REPORT1 as well to get rid of the
> space.
> 
> Matt
> 
> 
> 
> Goran Jovanovic wrote:
> 
> >Hi,
> >
> >I am seeing an extra "the" in the vir*.log files
> >
> >07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus=
W32/[EMAIL PROTECTED]
> >Attachment=me.zip [2] O 07/22/2004 11:56:05 Qe38302800104c34d Scanner
> >2: Virus= the W32/[EMAIL PROTECTED] Attachment=me.zip [2] O
> >
> >After the Scanner 1: Virus= it has the name of the virus
> >After the Scanner 2: Virus= it has an extra "the" then name of the
> >virus
> >
> >Scanner 1 is F-Prot
> >Scanner 2 is McAfee
> >
> >Any reason why?
> >
> > Goran Jovanovic
> > The LAN Shoppe
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus
> >(http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.Virus mailing list.  To
unsubscribe,
> >just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.Virus".The archives can be found
> >at http://www.mail-archive.com.
> >
> >
> >
> >
> 
> --
> =
> MailPure custom filters for Declude JunkMail Pro.
> http://www.mailpure.com/software/
> =
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
> just
> send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Matt




Thanks for pointing that out.  I have yet to come across that issue
after migrating to McAfee only a few days ago (because AVG doesn't want
to recognize their problem after multiple E-mails, which is a departure
from the past).

Matt



Andy Schmidt wrote:

  Hm,

I recommend AGAINST the "Found the".

McAfee is inconsistent in prepending the "the", examples from today:

Scanner 1: Virus= application Exploit-MIME.gen.c. Attachment=[HTML segment]
[17] I
Scanner 1: Virus= the W32/[EMAIL PROTECTED] Attachment=report01.zip [17] I


Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Friday, July 23, 2004 06:25 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Extra "the" in the log file


Goran,

Change the REPORT line for your second scanner (McAfee) to the following:

REPORT2Found the

If you add a space following the word "the" it will also take care of 
the space.  You can do the same for REPORT1 as well to get rid of the space.

Matt



Goran Jovanovic wrote:

  
  
Hi,

I am seeing an extra "the" in the vir*.log files

07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus= W32/[EMAIL PROTECTED] 
Attachment=me.zip [2] O 07/22/2004 11:56:05 Qe38302800104c34d Scanner 
2: Virus= the W32/[EMAIL PROTECTED] Attachment=me.zip [2] O

After the Scanner 1: Virus= it has the name of the virus
After the Scanner 2: Virus= it has an extra "the" then name of the 
virus

Scanner 1 is F-Prot
Scanner 2 is McAfee

Any reason why?

Goran Jovanovic
The LAN Shoppe

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


 


  
  
  


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




RE: [Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Andy Schmidt
Hm,

I recommend AGAINST the "Found the".

McAfee is inconsistent in prepending the "the", examples from today:

Scanner 1: Virus= application Exploit-MIME.gen.c. Attachment=[HTML segment]
[17] I
Scanner 1: Virus= the W32/[EMAIL PROTECTED] Attachment=report01.zip [17] I


Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, July 23, 2004 06:25 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Extra "the" in the log file


Goran,

Change the REPORT line for your second scanner (McAfee) to the following:

REPORT2Found the

If you add a space following the word "the" it will also take care of 
the space.  You can do the same for REPORT1 as well to get rid of the space.

Matt



Goran Jovanovic wrote:

>Hi,
>
>I am seeing an extra "the" in the vir*.log files
>
>07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus= W32/[EMAIL PROTECTED] 
>Attachment=me.zip [2] O 07/22/2004 11:56:05 Qe38302800104c34d Scanner 
>2: Virus= the W32/[EMAIL PROTECTED] Attachment=me.zip [2] O
>
>After the Scanner 1: Virus= it has the name of the virus
>After the Scanner 2: Virus= it has an extra "the" then name of the 
>virus
>
>Scanner 1 is F-Prot
>Scanner 2 is McAfee
>
>Any reason why?
> 
> Goran Jovanovic
> The LAN Shoppe
>
>---
>[This E-mail was scanned for viruses by Declude Virus 
>(http://www.declude.com)]
>
>---
>This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
>just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.Virus".The archives can be found
>at http://www.mail-archive.com.
>
>
>  
>

-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Andy Schmidt
Yes, McAfee sometimes inserts a "the" into their report

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Friday, July 23, 2004 06:17 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] Extra "the" in the log file


Hi,

I am seeing an extra "the" in the vir*.log files

07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus= W32/[EMAIL PROTECTED]
Attachment=me.zip [2] O 07/22/2004 11:56:05 Qe38302800104c34d Scanner 2:
Virus= the W32/[EMAIL PROTECTED] Attachment=me.zip [2] O

After the Scanner 1: Virus= it has the name of the virus
After the Scanner 2: Virus= it has an extra "the" then name of the virus

Scanner 1 is F-Prot
Scanner 2 is McAfee

Any reason why?
 
 Goran Jovanovic
 The LAN Shoppe

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Matt
Goran,
Change the REPORT line for your second scanner (McAfee) to the following:
REPORT2Found the
If you add a space following the word "the" it will also take care of 
the space.  You can do the same for REPORT1 as well to get rid of the space.

Matt

Goran Jovanovic wrote:
Hi,
I am seeing an extra "the" in the vir*.log files
07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus= W32/[EMAIL PROTECTED]
Attachment=me.zip [2] O
07/22/2004 11:56:05 Qe38302800104c34d Scanner 2: Virus= the
W32/[EMAIL PROTECTED] Attachment=me.zip [2] O
After the Scanner 1: Virus= it has the name of the virus
After the Scanner 2: Virus= it has an extra "the" then name of the virus
Scanner 1 is F-Prot
Scanner 2 is McAfee
Any reason why?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
 

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Extra "the" in the log file

2004-07-23 Thread Goran Jovanovic
Hi,

I am seeing an extra "the" in the vir*.log files

07/22/2004 11:56:03 Qe38302800104c34d Scanner 1: Virus= W32/[EMAIL PROTECTED]
Attachment=me.zip [2] O
07/22/2004 11:56:05 Qe38302800104c34d Scanner 2: Virus= the
W32/[EMAIL PROTECTED] Attachment=me.zip [2] O

After the Scanner 1: Virus= it has the name of the virus
After the Scanner 2: Virus= it has an extra "the" then name of the virus

Scanner 1 is F-Prot
Scanner 2 is McAfee

Any reason why?
 
 Goran Jovanovic
 The LAN Shoppe

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.