> I saved an email message infected with Sircam virus as a .eml file, and
tried to scan it with different AV programs.
> of all what I used (Fprot, Mcafee, Sophos, Norton), only norton detected
the virus.
That's because the .eml file you saved isn't a virus, it's an E-mail. An
E-mail can contain a virus, but an E-mail file can't be executed. F-Prot
doesn't detect a virus because it can't be run in that form. When you save
the E-mail as an .eml file, there are many different encoding formats that
could be used, and a standard desktop scanner doesn't normally understand them.
> What does that mean ? if I use Mcafee or fprot with declude, they wont
detect sircam ?
They will. Declude will decode the attachment, so F-Prot (or the others)
can detect it.
> Are you having success intercepting sircam, when using declude with
Fprot ? dos or windows version ?
> what about Mcafee ?
When F-Prot first came out, people with F-Prot (either DOS or Windows)
detected it immediately; McAfee detected it after an update to the virus
definitions.
> declude website mentioned a "multiplatform" version of virussacn that
can run on NT server, wasn't able to find such a > product. can anyone
point me to the right direction ?
There's a recent E-mail to this IMail mailing list that explains about
McAfee and the product that works on NT server but they don't like to
sell. If you really want to find it, either call them and ask for "One
copy of the MultiPlatform version of VirusScan" or "One copy of the
VirusScan Security Suite" (but be prepared for them to try selling you a
$6,000 product instead of a $60 product). Or, online, first go to
http://www.mcafeeb2b.com, move the mouse over "Products" and select "File
Server Protection". Then, go down and click on "NetShield for NT", then on
the right-hand side of the screen click "Buy", then go down to "VirusScan
Security Suite". They used to let you buy one copy at a time, but they
require orders of 5+ copies now to order online.
> will declude tech support help us choose configure and test the AV product ?
Yes, we will. Since we act as the "middleman" getting IMail and the
scanner to communicate with each other, we take care of issues with
Declude, as well as issues getting Declude to interact with IMail and/or
the scanner.
-Scott
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
