I just found the reason: i made a new virus.cfg file because of the changes (mostly in documentation). I included the scanner command line for f-prot and did by mistake add the /NOFLOPPY parameter. This parameter causes this behaviour, double checked.
The wrong message at first was because i did not update the declude.exe in the right place, so there was still 1.76b in place. Hermann > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Monday, April 05, 2004 9:02 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] Declude Virus v1.79 (beta) released > > > > >No, i changed nothing in the virus scanner. I do not have on access > >scanning on before and not after the new declude. > >I just copied the new delude.exe over the old one. > > > >Every message has this or similar lines (1 of 2 not deleted, > 2 of 3 not > >deleted, 4 of 5 not deleted), except those with only skipped > extensions. > > I'm guessing the debug mode will be needed here. To do this, > change the > "LOGLEVEL LOW" line in \IMail\Declude\virus.cfg to "LOGLEVEL > DEBUG". Then, > send the test eicar.com file through (using our Test Virus Sender at > http://www.declude.com/tools ), and then switch back to > "LOGLEVEL LOW" (the > debug mode adds huge amounts of information to the log file). > You can then > send me the \IMail\spool\vir####.log file off-list (as an > attachment, NOT > sent from web messaging), and I can take a look at it to see > what is happening. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
