[Declude.Virus] F-prot help

2005-02-18 Thread Mark Gordon
Title: F-prot help






This has been hashed out before and I checked the archive. I cannot get my installation of declude to work.


This is my config:


C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /DUMB REPORT=report.txt

VIRUSCODE 3

VIRUSCODE 6

VIRUSCODE 8

REPORT Infection: 


On access is set to On.


Here is my error. I have reinstalled f-prot twice. The scheduler and realtime scanners have not been installed.


02/18/2005 14:25:30 Q412a0025005613ea 1 [1 of 2 not deleted] files were deleted; assuming external virus scanner found a virus

02/18/2005 14:25:30 Q412a0025005613ea File(s) are INFECTED [: 13]

02/18/2005 14:25:30 Q412a0025005613ea Scanned: CONTAINS A VIRUS [MIME: 1 883]

02/18/2005 14:25:30 Q412a0025005613ea From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 206.27.11.13]

02/18/2005 14:25:30 Q412a0025005613ea Subject: virustest-1


It used to give the name of the virus and now nothing.





Re: [Declude.Virus] F-prot help

2005-02-18 Thread Darrell \([EMAIL PROTECTED])
Title: F-prot help



Mark,

When you say "on access is set to on" and then 
below that you mentioned the realtime scanner was not installed. Do you 
have an on access virus scanner running? Even one other than F-Prot that 
may be scanning your server?

Darrell
---Check out http://www.invariantsystems.com for 
utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.

  - Original Message - 
  From: 
  Mark Gordon 
  To: Declude.Virus@declude.com 
  Sent: Friday, February 18, 2005 2:44 
  PM
  Subject: [Declude.Virus] F-prot 
help
  
  This has been hashed out before and I checked the 
  archive. I cannot get my installation of declude to work. 
  This is my config: 
  C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM 
  /ARCHIVE=3 /NOBOOT /DUMB REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 
  VIRUSCODE 8 REPORT Infection: 
  On access is set to On. 
  Here is my error. I have reinstalled f-prot twice. 
  The scheduler and realtime scanners have not been installed. 
  02/18/2005 14:25:30 Q412a0025005613ea 1 [1 of 2 not 
  deleted] files were deleted; assuming external virus scanner found a 
  virus
  02/18/2005 14:25:30 Q412a0025005613ea File(s) are 
  INFECTED [: 13] 02/18/2005 14:25:30 
  Q412a0025005613ea Scanned: CONTAINS A VIRUS [MIME: 1 883] 02/18/2005 14:25:30 Q412a0025005613ea From: 
  [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 
  206.27.11.13]
  02/18/2005 14:25:30 Q412a0025005613ea 
  Subject: virustest-1 
  It used to give the name of the virus and now 
  nothing. 


RE: [Declude.Virus] F-prot help

2005-02-18 Thread Mark Gordon
Title: F-prot help



I only have f-prot running when it is called. Should I have 
this to off?



ThanksMark
System Administrator


  
  
  From: Darrell ([EMAIL PROTECTED]) 
  [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 
  3:03 PMTo: Declude.Virus@declude.comSubject: Re: 
  [Declude.Virus] F-prot help
  
  Mark,
  
  When you say "on access is set to on" and then 
  below that you mentioned the realtime scanner was not installed. Do you 
  have an on access virus scanner running? Even one other than F-Prot that 
  may be scanning your server?
  
  Darrell
  ---Check out http://www.invariantsystems.com for 
  utilities for Declude And Imail. IMail/Declude Overflow Queue 
  Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.
  
- Original Message - 
From: 
Mark Gordon 
To: Declude.Virus@declude.com 
Sent: Friday, February 18, 2005 2:44 
PM
Subject: [Declude.Virus] F-prot 
help

This has been hashed out before and I checked the 
archive. I cannot get my installation of declude to work. 
This is my config: 
C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM 
/ARCHIVE=3 /NOBOOT /DUMB REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 
VIRUSCODE 8 REPORT Infection: 
On access is set to On. 
Here is my error. I have reinstalled f-prot 
twice. The scheduler and realtime scanners have not been installed. 

02/18/2005 14:25:30 Q412a0025005613ea 1 [1 of 2 
not deleted] files were deleted; assuming external virus scanner found a 
virus
02/18/2005 14:25:30 Q412a0025005613ea File(s) are 
INFECTED [: 13] 02/18/2005 14:25:30 
Q412a0025005613ea Scanned: CONTAINS A VIRUS [MIME: 1 883] 02/18/2005 14:25:30 Q412a0025005613ea From: 
[EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 
206.27.11.13]
02/18/2005 14:25:30 Q412a0025005613ea 
Subject: virustest-1 
It used to give the name of the virus and now 
nothing. 


Re: [Declude.Virus] F-prot help

2005-02-18 Thread R. Scott Perry

This has been hashed out before and I checked the archive. I cannot get my 
installation of declude to work.

This is my config:
C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT /DUMB 
REPORT=report.txt
That should be /REPORT=report.txt (with a / in front of it).  Without 
the /, F-Prot doesn't save the report.txt file, so:

02/18/2005 14:25:30 Q412a0025005613ea 1 [1 of 2 not deleted] files were 
deleted; assuming external virus scanner found a virus
Declude Virus doesn't see the report.txt file it expects, and thinks that 
an on-access virus scanner deleted the file.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] F-prot help

2005-02-18 Thread Mark Gordon
Ok I added the / switch. Let me try again. 
From the vir log:
02/18/2005 15:08:28 Q4b3c006c00321457 1 [1 of 2 not deleted] files were
deleted.  You should not use an on-access virus scanner that scans the
IMail directory or sub-directories.
02/18/2005 15:08:28 Q4b3c006c00321457 Scanned: Virus Free [MIME: 1 883]
ONACCESS is set to OFF now 


 
 
Thanks
Mark
System Administrator

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Friday, February 18, 2005 2:59 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] F-prot help


This has been hashed out before and I checked the archive. I cannot get

my installation of declude to work.

This is my config:

C:\scanners\fprot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=3 /NOBOOT 
/DUMB REPORT=report.txt

That should be /REPORT=report.txt (with a / in front of it).
Without the /, F-Prot doesn't save the report.txt file, so:

02/18/2005 14:25:30 Q412a0025005613ea 1 [1 of 2 not deleted] files were

deleted; assuming external virus scanner found a virus

Declude Virus doesn't see the report.txt file it expects, and thinks
that an on-access virus scanner deleted the file.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in
mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.