This isn't right. F-prot will detect .txt without problems. Use the "/dumb" switch. It's a bad name, but really means to check all files regardless of extension. Jerry ----- Original Message ----- From: "OurLists" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 22, 2001 5:16 AM Subject: RE: [Declude.Virus] Problems with eicar.com.txt detection > I can't get f-prot to test positive for txt files with any setting. I sent > an email to f-prot about this and if I understand their reply properly (and > I'm not certain I do) they are saying that their windows "real time" program > would catch it if you tried to execute it but otherwise it is not dangerous > so the command line passes it. > > But this seems to be counter to what I was trying to do with declude so > that's why I went to Mcaffee's product. > > Terry Fritts > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry > Sent: Wednesday, February 21, 2001 8:27 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Problems with eicar.com.txt detection > > > > >Declude stops eicar.com, eicar_com.zip and eicarcom2.zip .. but it lets > >the eicar.com.txt file get through. Why is this? Also, how do I fix it (if > >possible) .. Many thanks in advance. > > That's probably because the virus scanner knows that a virus can't be run > directly with a text file. The recipient would have to intentionally > change the extension in order for it to be run. If you want to be extra > safe, you can use F-Prot's "/DUMB" switch (just add it to the SCANFILE > option in \IMail\Declude\virus.cfg), which sounds like it will scan all > extensions. > -Scott > > [ This E-mail came from the Declude.Virus mailing list. To ] > [ unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ] > [ type "unsubscribe Declude.Virus yourname". You can E-mail ] > [ [EMAIL PROTECTED] for assistance. You can visit our web ] > [ site at http://www.declude.com . ] [ This E-mail came from the Declude.Virus mailing list. To ] [ unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ] [ type "unsubscribe Declude.Virus yourname". You can E-mail ] [ [EMAIL PROTECTED] for assistance. You can visit our web ] [ site at http://www.declude.com . ]
