RE: [Declude.Virus] AVG - Not identifying virus found.
With version 7 I couldn't use the avgscan.exe (Scanned: Error starting scanner) but it worked with C:\Progra~1\Grisoft\AVG7\avg.exe /NOMEM /NOSELF /ARC /REPORT=report.txt Thanks.. Mike -Original Message- SCANFILE2 C:\Progra~1\Grisoft\AVG6\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE 2 VIRUSCODE 6 REPORT2identified ... Scott will correct me if I am wrong. Good work -- it looks like it can be done. :) That is good news. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] AVG - Not identifying virus found.
Works great Fritz! BTW, what is the difference between avgscan.exe and avg.exe? And which should be used? Peter - Original Message - From: Fritz Squib [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 8:20 AM Subject: RE: [Declude.Virus] AVG - Not identifying virus found. Eddie, After some fooling around, I *THINK* this will work, at least this is how mine is set up and it *APPEARS* to be working. SCANFILE c:\Progra~1\FSI\F-Prot\fpcmd.EXE -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORTInfection: SCANFILE2 C:\Progra~1\Grisoft\AVG6\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE 2 VIRUSCODE 6 REPORT2identified The key here is REPORT2, that is the text string declude looks for to find the virus name. For my test I changed AVG to be my primary and I received: The Declude Virus software on wpa.net has reported that you were sent an E-mail from [EMAIL PROTECTED], containing the EICAR_Test virus in the eicar.com attachment. The subject of the E-mail was Test eicar.com file [eicarplain]. The E-mail containing the virus has been quarantined to prevent further damage. Scott will correct me if I am wrong. Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eddie Pang Sent: Tuesday, August 05, 2003 5:01 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] AVG - Not identifying virus found. For those using the trial version, have you noticed that AVG is not identifying what virus is caught. This is a eicar.zip test file. 08/04/2003 21:48:13 Q61390032023c9aef Scanner #1 detected a virus 08/04/2003 21:48:13 Q61390032023c9aef File(s) are INFECTED [: 6] 08/04/2003 21:48:13 Q61390032023c9aef Deleting file with virus 08/04/2003 21:48:13 Q61390032023c9aef Deleting E-mail with virus! 08/04/2003 21:48:13 Q61390032023c9aef Scanned: CONTAINS A VIRUS [MIME: 2 610] 08/04/2003 21:48:13 Q61390032023c9aef From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 24.94.xxx.xxx] 08/04/2003 21:48:13 Q61390032023c9aef Subject: test Is there a way to have AVG pass through the name of the virus, so that our sender.eml will know what viruses to skip. Sincerely, Eddie :) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] AVG - Not identifying virus found.
I'm guilty of not RTFM, please note the multiple scanner config below, SCANFILE c:\Progra~1\FSI\F-Prot\fpcmd.EXE -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORTInfection: SCANFILE2 C:\Progra~1\Grisoft\AVG6\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE2 2 VIRUSCODE2 6 REPORT2identified I forgot to add a 2 to the VIRUSCODE, and was getting errors in my logfile from the first scanner whenever the second scanner would detect a virus. It looks to me like avg.exe is the DOS version and avgscan.exe is the true 32 bit version. Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] AVG - Not identifying virus found.
Downloaded the trial version of AVG for File Server this morning and I've found if I use avgscan.exe Declude won't call it, but if I use avg.exe it works. First scanner is FProt second scanner is AVG With avgscan.exe 08/05/2003 10:36:41 Qcf09004301900571 Scanner 1: Virus=: EICAR_Test_File Attachment=eicar.com [12] I 08/05/2003 10:36:42 Qcf09004301900571 Found a bogus .com file 08/05/2003 10:36:42 Qcf09004301900571 File(s) are INFECTED [: EICAR_Test_File: 0] 08/05/2003 10:36:42 Qcf09004301900571 Deleting file with virus 08/05/2003 10:36:42 Qcf09004301900571 Deleting E-mail with virus! 08/05/2003 10:36:42 Qcf09004301900571 Scanned: CONTAINS A VIRUS [MIME: 2 684] 08/05/2003 10:36:42 Qcf09004301900571 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 64.250.192.32] 08/05/2003 10:36:42 Qcf09004301900571 Subject: Test eicar.com file [eicarplain] with avg.exe 08/05/2003 10:38:03 Qcf5b0028015e467c Scanner 1: Virus=: EICAR_Test_File Attachment=eicar.com [12] I 08/05/2003 10:38:05 Qcf5d00ed015a4ff2 Scanned: Virus Free [Prescan OK][MIME: 2 6620] 08/05/2003 10:38:06 Qcf5b0028015e467c Scanner 2: Virus= EICAR_Test Attachment=eicar.com [12] I 08/05/2003 10:38:06 Qcf5b0028015e467c Found a bogus .com file 08/05/2003 10:38:06 Qcf5b0028015e467c File(s) are INFECTED [: EICAR_Test_File: 6] 08/05/2003 10:38:06 Qcf5b0028015e467c Deleting file with virus 08/05/2003 10:38:06 Qcf5b0028015e467c Deleting E-mail with virus! 08/05/2003 10:38:06 Qcf5b0028015e467c Scanned: CONTAINS A VIRUS [MIME: 2 684] 08/05/2003 10:38:06 Qcf5b0028015e467c From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 64.250.192.32] 08/05/2003 10:38:06 Qcf5b0028015e467c Subject: Test eicar.com file [eicarplain] Steven Copeland -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Fritz Squib Sent: Tuesday, August 05, 2003 10:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] AVG - Not identifying virus found. I'm guilty of not RTFM, please note the multiple scanner config below, SCANFILE c:\Progra~1\FSI\F-Prot\fpcmd.EXE -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORTInfection: SCANFILE2 C:\Progra~1\Grisoft\AVG6\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE2 2 VIRUSCODE2 6 REPORT2identified I forgot to add a 2 to the VIRUSCODE, and was getting errors in my logfile from the first scanner whenever the second scanner would detect a virus. It looks to me like avg.exe is the DOS version and avgscan.exe is the true 32 bit version. Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] AVG - Not identifying virus found.
Eddie, After some fooling around, I *THINK* this will work, at least this is how mine is set up and it *APPEARS* to be working. SCANFILE c:\Progra~1\FSI\F-Prot\fpcmd.EXE -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt VIRUSCODE 3 VIRUSCODE 6 REPORTInfection: SCANFILE2 C:\Progra~1\Grisoft\AVG6\avgscan.exe /NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE 2 VIRUSCODE 6 REPORT2identified The key here is REPORT2, that is the text string declude looks for to find the virus name. For my test I changed AVG to be my primary and I received: The Declude Virus software on wpa.net has reported that you were sent an E-mail from [EMAIL PROTECTED], containing the EICAR_Test virus in the eicar.com attachment. The subject of the E-mail was Test eicar.com file [eicarplain]. The E-mail containing the virus has been quarantined to prevent further damage. Scott will correct me if I am wrong. Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eddie Pang Sent: Tuesday, August 05, 2003 5:01 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] AVG - Not identifying virus found. For those using the trial version, have you noticed that AVG is not identifying what virus is caught. This is a eicar.zip test file. 08/04/2003 21:48:13 Q61390032023c9aef Scanner #1 detected a virus 08/04/2003 21:48:13 Q61390032023c9aef File(s) are INFECTED [: 6] 08/04/2003 21:48:13 Q61390032023c9aef Deleting file with virus 08/04/2003 21:48:13 Q61390032023c9aef Deleting E-mail with virus! 08/04/2003 21:48:13 Q61390032023c9aef Scanned: CONTAINS A VIRUS [MIME: 2 610] 08/04/2003 21:48:13 Q61390032023c9aef From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 24.94.xxx.xxx] 08/04/2003 21:48:13 Q61390032023c9aef Subject: test Is there a way to have AVG pass through the name of the virus, so that our sender.eml will know what viruses to skip. Sincerely, Eddie :) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
