[Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread Andy Schmidt
Hi Dave: I see. Based on your email I checked the “Virus” side of things – and I do see Zerohour log entires. 06/07/2009 23:44:36.968 q29d5b0d20821.smd Vulnerability flags = 1 06/07/2009 23:44:36.984 q29d5b0d20821.smd ZEROHOUR Reports VIRUS: Unknown 06/07/2009 23:44:36.984

RE: [Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread David Barker
Commtouch Zerohour identifies virus’ based on traffic patterns rather than signatures this is why it is not associated with a name. There is only one option currently for Commtouch – in the global.cfg ZEROHOUR x Where x is the weight assigned if ZEROHOUR is triggered. In the Declude

RE: [Declude.Virus] ClamAV

2009-06-08 Thread Andy Schmidt
Hi David: The best is http://oss.netfarm.it/clamav - because it's the same one ClamWin is using and it's kept up-to-date. I don't recall any installation difficulty. It did have a successful installer and is able to install itself as a service. There is a .REG file that sets up a registry entry

[Declude.Virus] automated response

2009-06-08 Thread Doug Cass
Thanks for the email!!! However, I will be out of the office until Tueday, June 9th when I will return and sort the good mail from the junk mail. If your email is important, don't worry, I'll get to it. Thanks! --- This E-mail came from the Declude.Virus mailing list. To unsubscribe,

RE: [Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread Andy Schmidt
Hi David: Thanks. The Global.cfg configures the Declude.Junkmail - but you said it was implemented as Declude.Virus. So any configuration would go into the Virus.cfg file. It seems to me as if it's implemented in some fashion in both ends. In the Declude EVA the ZEROHOUR is part of the

RE: [Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread David Barker
Andy, It is implemented in the Declude virus but because the spam function overlaps into junkmail and the spam weighting system is in junkmail the weight is specified in the global.cfg - as you can see it is more as a directive than a test. Secondly you are correct about the developer who

RE: [Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread Andy Schmidt
Fair enough! Looks like a good service in general - hopefully, the implementation can be cleaned up at some point. Thanks, Andy From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Monday, June 08, 2009 11:10 AM To: declude.virus@declude.com Subject:

RE: [Declude.Virus] ZEROHOUR, scanner order

2009-06-08 Thread David Barker
I confirmed that Commtouch runs before AVG as the internal virus scanner and currently there is no way to change this without changing the code. I will add this as a dev request to switch the order of AVG and Commtouch. David From: supp...@declude.com [mailto:supp...@declude.com] On Behalf