What most people using to auto update Mcafee command line
scanner?
Mark Reimer
IT System Admin
American CareSource
972-308-6887
---This E-mail came from the Declude.Virus mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe
Anyone know where to find this? I assume most people are
switching away from F-prot because of their wonderful new licensing structure. It
seems Clam and Mcafee are the most popular but what else are users using and
liking? Also is there any real difference between Clamwin and Clam-win32?
Does somenone already works with the new 5000-er
engine?
Does someone has experience?
Thanks for information,
Uwe
I changed the subject so that people can be alerted to this.
Announcements of things like this would be useful to the entire Declude
customer base. I am afraid that we are a little over a month behind.
Those with a single scanner would be screwed.
I adjusted my scripts to use the link that
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Monday, September 12, 2005 3:58 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] McAfee DailyDAT
download location change.
I changed the subject so that people can be alerted to this.
Announcements of things like
I have to check my script because it still works fine up to
now.
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Monday, September 12, 2005 9:58 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] McAfee
DailyDAT download
Declude at all.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Monday, September 12, 2005 12:58 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] McAfee
DailyDAT download location change.
I changed the subject so that people can be alerted
Subject: Re: [Declude.Virus] McAfee DailyDAT download location
change.
I changed the subject so that people can be alerted to this.
Announcements of things like this would be useful to the entire Declude
customer base. I am afraid that we are a little over a month behind.
Those with a single scanner
The Proper method to
update the dat would be to pull the "ini" file
http://download.nai.com/products/datfiles/4.x/nai/update.ini
Then Parse this
[zip] section
The FTP site doesn't have the beta DAT's listed. It is the beta DAT's
that contain the latest updates, and for an E-mail system, they are the
best thing to use. Naturally they aren't as well tested as the other
things, but they will block things more quickly and you have to weigh
that against
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] McAfee DailyDAT download location change.
David,
Information such as this is best 'pushed' rather than 'pulled'. Declude
should have a notification list that sends announcements of important
things concerning all products such as new
I think I missed something, and I'll admit right up front that I've been
swamped and I haven't been paying attention as close as circumstances
require, so it's my own fault.
That being said, I'm getting a steady stream of Error 8 in virus scanner
1. messages in my virus logs over the last several
I've noted that McAfee will throw errors from time to time when called
with Declude, and when it does, they tend to come in droves, otherwise I
can go weeks with it being absolutely quiet. I have a feeling that this
might be related to the daily dats. Today I have seen over a dozen such
I haven't seen anything obvious in a quick glance through today's logs.
Do you have an example?
Usually, I just force another download of the dats.
- Original Message -
From: Matt [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, April 25, 2005 3:42 PM
Subject: [Declude.Virus
I've never seen this before, but beginning on Saturday morning, I
started getting appearances of "Application Error" in my Event Log
about McAfee:
Faulting application Scan.exe, version 4.3.2.0, faulting
module mcscan32.dll, version 4.3.2.0, fault address 0x0001cfd0.
Then this morning the
updates (version 4400\4426).
Bill
- Original Message -
From: Matt [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, February 07, 2005 6:27 AM
Subject: [Declude.Virus] McAfee and POP3 service crash
I've never seen this before, but beginning on Saturday morning, I
started getting
: Re: [Declude.Virus] McAfee and POP3 service crash
Although I cannot explain the cause of the issues you've seen, I would
suggest that you upgrade your scan engine:
http://www.mcafeesecurity.com/us/downloads/default.asp?wt.mc_n=us_update
swt.mc_t=ext_li_concid=10373.
Download and run the SuperDat
Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Bill Landry
Sent: Monday, February 07, 2005 7:04 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] McAfee and POP3 service crash
Although I cannot explain the cause of the issues you've seen, I
client that
changed!
Andrew
8)
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of MattSent: Monday, February 07, 2005 10:35
AMTo: Declude.Virus@declude.comSubject: Re:
[Declude.Virus] McAfee and POP3 service
crashAndrew,When you say "re
8)
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Colbeck, AndrewSent: Monday, February 07, 2005 10:54
AMTo: Declude.Virus@declude.comSubject: RE:
[Declude.Virus] McAfee and POP3 service crash
I
don't mean scanning the files
Of Colbeck,
Andrew
Sent: Monday, February 07, 2005 10:54 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] McAfee and POP3 service crash
I don't mean scanning the files in the
root repetitively. In particular, FileMon was showing me that scan.exe
was READing D
Anybody installed VScan 8i on an IMail/Declude setup?
We just got our copy of it and I wanted to see if there are any gotchas
before going forward with the upgrade from v7.1.
Doug
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Version 8 has extremely limited user functionality (far less
than version 7 had). For example, you cannot exclude
directories or applications from being scanned. And, if the
virus scanner spots something suspicious even though
clearly NOT a virus it stops all process of the application
in
] On Behalf Of Wolf Tombe
Sent: Friday, September 03, 2004 12:05 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] McAfee VScan 8
Version 8 has extremely limited user functionality (far less than version 7 had). For
example, you cannot exclude directories or applications from being scanned
Very good Point about the enterprise version! I just say the
subject line which indicated McAfee VScan 8 and immediately
reacted with a warning since I've had several pretty
significant problems with it do to it's limitations.
Wolf
---
[This E-mail was scanned for viruses by Declude Virus
Scott,
Looking at the logging in terms of vulnerabilities I noticed that under
certain circumstances it does not print out the File(s) are Infected line
when the vulnerability is found in the subject or from field. Is this by
design? Also, in terms of when it catches the vulnerability in
]
Sent: Friday, September 03, 2004 4:04 PM
Subject: RE: [Declude.Virus] McAfee VScan 8
Very good Point about the enterprise version! I just say the
subject line which indicated McAfee VScan 8 and immediately
reacted with a warning since I've had several pretty
significant problems with it do
Hi,
About 3 years ago I ordered McAfee Active Virus Defense (aka NetShield
Security Suite) v4.5 from CDW for use with Declude. Their part numbers have
changed over the years, but this link to CDW should get you started.
http://www.cdw.com/shop/products/default.aspx?EDC=343571
If you talk
Is this a real price for the Mcafee command line scanner:
http://www.macmall.com/macmall/shop/detail.asp?dpno=118250
Has anyone found this software this low?? This is what is needed to work
with Declude?
Thanks,
Adam
---
[This E-mail was scanned for viruses by Declude Virus
It will work, but you will most likely be violating their licensing
agreement.
- Original Message -
From: Adam Hobach [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 07, 2004 12:31 PM
Subject: [Declude.Virus] Mcafee command line scanner
Is this a real price
Which Mcafee product does everyone use then?
Thanks,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
Sent: Wednesday, July 07, 2004 11:31 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Mcafee command line scanner
It will work
:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee command line scanner
Which Mcafee product does everyone use then?
Thanks,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
Sent: Wednesday, July 07, 2004 11:31 AM
To: [EMAIL
More info on problems with the old engine. Also sometimes (esp on Win
98) it may take some extra procedures to fully update the engine.
http://forums.mcafeehelp.com/viewtopic.php?t=27957
PS For any McAfee question this forum is a GREAT resource.
(Focused on Retail customers, but there is a small
Contact Microsoft. They can analyze the dumps for you. 64K dumps should be
fine.
DC
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Hahn
Sent: Wednesday, April 28, 2004 3:24 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee NetShield
, April 28, 2004 5:23 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee NetShield Problems
I agree with Scott's response about LDAP.
The raid controller firmware I am not concerned with, although I did not
know they had a new one. I will have to check on my clients 2650 for that.
While
and installing it.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Scott Hahn
Sent: Wednesday, April 28, 2004 12:24 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee NetShield
:38 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee NetShield Problems
I also opened drwatsn32. It is enabled and noticed a error I N ldap
Application exception occurred:
Given this
App: f:\imail\OpenLDAP\bin\slapd.exe (pid=1940)
and:
Imail 8.1 latest
this, I think
: RE: [Declude.Virus] Mcafee NetShield Problems
How can I tell what hotfixes were applied to my system?
I am 8.1, I think I have HF2 (The latest)
In the meantime I have disabled LDAP to see if that helps.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R
Thanks
Scott Hahn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of marc catuogno
Sent: Wednesday, April 28, 2004 10:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee NetShield Problems
Start;Programs;Imail;Imail release notes -
I'm
I am working on the mcafee batch updates linked to on declude.com
I am trying to customize the file for a special case, and to rewrite one to
download the latest McAfee engine instead of SDAT
for that, i need some help understanding the lines below
any hints welcomed
mainly, how do we get the
Hickerson
Sent: Wednesday, February 25, 2004 3:45 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Mcafee
Here is some information for a McAfee VirusScan Command Line which works
well. From the testing I've done it appears to be a fast, small,
lightweight scanner with SCAN.EXE and all the Declude
It's Mcafee Virus Scan Ver 8.0 Build 8.0.26
There isn't a scan.exe or scan32.exe on the drive.
You'll need to do a Full Install. That should get the scan.exe installed.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, February 25, 2004 5:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
It's Mcafee Virus Scan Ver 8.0 Build 8.0.26
There isn't a scan.exe or scan32.exe on the drive.
You'll need to do a Full Install. That should get
I've re-installed it a couple of times but I haven't seen anywhere that
I can tell it to do a full install.
You'll need to contact McAfee then to see how to do a Full Install (or at
least how to get the scan.exe file installed).
-Scott
---
:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
Scott,
I've re-installed it a couple of times but I haven't seen anywhere that
I can tell it to do a full install.
Does anyone have this version?
Gene Head
ACCRAM Inc.
MCP,Net+,A+,CCNA,CCDA
[EMAIL PROTECTED]
[EMAIL PROTECTED
:[EMAIL PROTECTED] On Behalf Of Gene Head
Sent: Wednesday, February 25, 2004 9:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
Scott,
I've re-installed it a couple of times but I haven't seen anywhere that
I can tell it to do a full install.
Does anyone have this version?
Gene
, 2004 12:15 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
Do you have a part number/SKU for that?
I've called Mcafee and can't seem to get them to understand what I need.
They do have a version called VirusScan ASAP but they can't tell me if it
has scan.exe.
Gene
version is 7.1.
Darrell
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gene Head
Sent: Wednesday, February 25, 2004 12:15 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
Do you have a part number/SKU for that?
I've called Mcafee and can't
into the installer.
Also, the current version is 7.1.
Darrell
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gene Head
Sent: Wednesday, February 25, 2004 12:15 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mcafee
Do you have a part number/SKU
Thanks for the link. I called them to get a price and ran into another
brick wall.
McAfee is like that. Their normal MO, though, is to oversell, doing
everything short of blatant lying to do so.
What you may want to do is try asking them I have one computer running
Windows XYZ (for example,
: [Declude.Virus] Mcafee
I just purchased Mcafee to use as a third scanner.
I installed it but I can't find the command line scanner.
Anyone have the new Virus scan program and can share the process for
getting this to work?
Gene Head
ACCRAM Inc.
MCP,Net+,A+,CCNA,CCDA
[EMAIL PROTECTED
I just purchased Mcafee to use as a third scanner.
I installed it but I can't find the command line scanner.
Anyone have the new Virus scan program and can share the process for
getting this to work?
Gene Head
ACCRAM Inc.
MCP,Net+,A+,CCNA,CCDA
[EMAIL PROTECTED]
[EMAIL PROTECTED]
---
[This
, February 24, 2004 6:36 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Mcafee
Typically the McAfee command line scanned, scan.exe, has been located
in
c:\program files\common files\Network Associates\VirusScan
Engine\4.0.xx, or
whatever version number you are running. Here is the McAfee entry
Dunno then. You may need to put a call into McAfee.
Bill
- Original Message -
From: Gene Head [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 24, 2004 6:48 PM
Subject: RE: [Declude.Virus] Mcafee
It's Mcafee Virus Scan Ver 8.0 Build 8.0.26
There isn't a scan.exe
Sorry for the denseness
I was looking at the McAfee help file, and there were /mime and /mailbox
switches. Am I missing something?
Also is there an AV product that will function w. Declude AV and clean and
pass the messages along? Statistically it would probably be seldom used as
most
I was looking at the McAfee help file, and there were /mime and /mailbox
switches. Am I missing something?
You can ignore those. McAfee won't see any MIME segments or mailboxes --
Declude Virus handles all that. McAfee will just see an attachment (one
that will be deleted immediately after
Sent: Wednesday, December 03, 2003 2:39 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] McAfee and /clean
Hello,
Is the /clean switch in McAfee AV (Enterprise Edition 7.1) supported
within Declude?
In other words is there a problem with adding /clean to the virus.cfg
file?
Thanks
Is the /clean switch in McAfee AV (Enterprise Edition 7.1) supported
within Declude?
No, it is not.
In other words is there a problem with adding /clean to the virus.cfg file?
Yes, there would be a problem. Specifically, McAfee will clean the decoded
attachment that Declude Virus creates,
Hi,
I think that virtually all virus infected emails nowadays contain worth
preserving, because the only thing attached is the virus itself. Cleaning
would not accomplish anything - because after the cleaning there'd be
nothing left. (Sorry to disappoint you, but that virus email that claims
Sumariwalla
Sent: Wednesday, December 03, 2003 2:39 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] McAfee and /clean
Hello,
Is the /clean switch in McAfee AV (Enterprise Edition 7.1) supported
within Declude?
In other words is there a problem with adding /clean to the virus.cfg
file
Hello R.,
Thursday, August 21, 2003, 2:59:18 PM, you wrote:
I did that with eicar and the On-Demand Scanner picked it up. However, when
I did it with Sobig.F, there was no attachment. Then I noticed that it was a
bounced message from another server (not using SKIPIFVIRUSNAMEHAS). I'm now
Sent: Wednesday, 20 August 2003 6:55 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] McAfee Enterprise 7.0 not picking up Sobig.F
I use two scanners, F-Prot and McAfee Enterprise 7.0. F-Prot is picking up
Sobig.F, but McAfee is not. I have the latest definitions, 4288, and the
latest engine
I did that with eicar and the On-Demand Scanner picked it up. However, when
I did it with Sobig.F, there was no attachment. Then I noticed that it was a
bounced message from another server (not using SKIPIFVIRUSNAMEHAS). I'm now
wondering if that is why McAfee On-Demand/Declude is not picking it
Scott,
Unfortunately (actually a good thing), all the virus e-mails I have left in
the \virus directory are bounces from other servers. I don't have a Sobig.F
attachment available to test. Once I receive one, I'll re-test.
Thanks,
Bill
-- Original Message
I use two scanners, F-Prot and McAfee Enterprise 7.0. F-Prot is picking up
Sobig.F, but McAfee is not. I have the latest definitions, 4288, and the
latest engine 4.2.60. When I send the test eicar file as a zip, both
scanners detect it, so I know both scanners are functioning. Does anyone
have any
f-prot scanner caught 8 messages yesterday with the w32/SoBig.A@mm
virus that Mcafee (NAI) passed. Mcafee dat is at 4241 released 1/8.
I scanned the smd file with NAV and it also reported soBig.
Reviewing NAI for information on w32/soBig.A
http://vil.nai.com/vil/content/v_99950.htm
indicates
NAI just sent me an extra.dat but I had to request it. After
installation of the extra.dat the Mcafee scanner is now detecting this
virus:
Scanner 2: Virus= the W32/Sobig@MM (ED) virus !!!
Attachment=Sample.pif [0] I
Getting several of these now.
Based on what I am seeing the treat
To those interested in the topic of virus scanner cost a few weeks ago,
here is an update on my conversations with McAfee.
Not Good.
If we got the rate of their best client, we would pay about $2,000 per
year.
Any we are a small shop.
:(
John Tolmachoff
IT Manager, Network Engineer
I have just installed NetShield, (full install disabled on demand,) but
I do not see a scan.exe in the directory. I do see the scan32.exe, but
according to the virus manual, that is not the one to use for command
line.
I even ran a manual scan to see if it would create it.
You may need to do a
- Original Message -
From: "Jerry Murdock" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, January 28, 2002 6:53 PM
Subject: [Declude.Virus] McAfee Daily DAT Command
Line Scanner Update Script
As requested a few times, attached is a script to update the engine
and
Then on the mcafee site there isn't a link for an update for the command
line scanner for the myparty virus. If there is a link, please forward
it.
Thanks,
STeve
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus
I'm not sure what your asking. Update instructions are clearly described in
the virus listing on McAfee's site.
Jerry
- Original Message -
From: Steve Spear [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, January 29, 2002 4:32 PM
Subject: Re: [Declude.Virus] McAfee Daily DAT
Thanks, that little trick helped me out.
Is there any chance I could have a peek a that update script of yours?
My scripting are rather basic, I doubt it would take me less than a day to
get it to work :P
Joachim.
If you actually managed to find and install the command line only version of
Tel: +44 (0)1223 326512
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
Sent: Friday, October 12, 2001 3:20 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
upgraded to engine 4.1.5, but still getting the timout
In the declude.cfg look for;
SCANNERTIMEOUT 60
I think 60 is the default so if you increase this your scanner is allowed
more time to scan big files and thus eliminate your problem.
Actually, his problem is with the scanner itself, when it is not being used
with Declude.
The SCANNERTIMEOUT
]
To: [EMAIL PROTECTED]
Sent: Friday, October 12, 2001 8:30 AM
Subject: RE: [Declude.Virus] McAfee NetShield Upgrade
In the declude.cfg look for;
SCANNERTIMEOUT 60
I think 60 is the default so if you increase this your scanner is allowed
more time to scan big files and thus eliminate your problem
forwarded email from aol (.eml files) have gotten through declude and
f-prot. users are returning messages to our users that those emails have a
virus. i need to include eml file attachments in scanning.
Declude with F-Prot should catch those. When the E-mail is forwarded as an
.eml file,
last week ?
- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 8:23 PM
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't
worthless
ftp://ftp.nai.com/pub/antivirus/superdat/intel/sdat4164.exe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
Sent: Thursday, October 11, 2001 4:57 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
thanks
just
At 01:23 PM 10/11/01, you wrote:
1: 4.0.70 must be 2-3 years old now. Run SDAT ASAP, the scanner isn't
worthless, but there are plenty of things that require the newer engines.
Is there a URL available for the SDAT? I've been searching McAfee's site
for way too long, no luck...
This E-mail
At 03:47 PM 10/11/01, you wrote:
At 01:23 PM 10/11/01, you
wrote:
1: 4.0.70 must be 2-3 years old
now. Run SDAT ASAP, the scanner isn't
worthless, but there are plenty of things that require the newer
engines.
Is there a URL available for the SDAT? I've been searching McAfee's
site for way too
-
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 11, 2001 10:04 PM
Subject: Re: [Declude.Virus] McAfee NetShield Upgrade
4100 is over a year old. Get the latest 4165 from the mcafee site.
Jerry
- Original Message -
From: Serge Dergham [EMAIL PROTECTED
82 matches
Mail list logo
