I also use F-Prot with The Bat, very similar to the method found at
http://www.guenther-eisele.de/bat/fprot_e.htm but with a slightly
different twist.
Instead of saving the attachment into a directory and scanning it, I
scan the whole message. One thing that F-Prot does do well is that it
is able to find nasty code hidden in messages without the need of
extracting the attachment from the message.
I use the %1 parameter to pass the message to a batch file for scanning
using a filter:
Run External Program -> C:\Program Files\The Bat!\Att-Scan.bat %1
This is a copy of the batch file that I use.
(NOTE: F-Prot uses exit codes when it terminates (finishes scanning), that is why
I am using the ERRORLEVEL command, so if F-Prot terminates using the exit code 1,
the rest of of the batch file continues, if not it quits)
--- Att-Scan.bat batch file ---
@ECHO OFF
CLS
ECHO;
C:\F-Prot\F-prot.exe %1 /archive /noboot /nomem /packed /dumb /list
IF ERRORLEVEL 1 GOTO ER1
GOTO END
:ER1
ECHO;
ECHO ****** WARNING Virus Alert! - Abnormal Termination ******
ECHO;
MOVE %1 C:\Windows\Desktop\Virus.txt
ECHO;
GOTO END
:END
--- End batch file ---
So when i receive a message with a attachment, the batch file is run
and F-Prot scans the whole message. If a virus or something that *may*
be suspicious is found, a copy of the message is saved to my Desktop in
a text file called Virus.txt. Then I can safely open the message in my
favourite text editor and look at the message safely.
Alan.
--
________________________________________________________
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ : http://faq.thebat.dutaint.com
