1. I have noticed that a new virus exit code being reported on AVG 

Exit Code 9 - Double extension

If you are running AVG and want to block double extensions eg. Password.doc
.exe

Add the following line to your virus.cfg

VIRUSCODE       9

Other additional codes are:

4 - suspicion detected by heuristic analysis
5 - virus found by heuristic analysis
6 - specific virus detected
7 - active virus in memory detected

The complete SCANFILE config would be something like this:

SCANFILE        C:\Progra~1\Grisoft\AVG7\avg.exe /NOBOOT /NOMEM /NOSELF /ARC
/REPORT=report.txt
VIRUSCODE       4
VIRUSCODE       5
VIRUSCODE       6
VIRUSCODE       7
VIRUSCODE       9
REPORT  identified

2. If you are running F-PROT ensure that you do NOT have a switch in your
SCANFILE 

/NOFLOPPY

This has been reported as not supported in the latest versions of F-Prot and
causes virus to get through

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to