|
I just
wanted to say thanks to everyone that shared their F-prot config and for the
explanation of the switches. It was very helpful!!
Mark Reimer
IT Project Manager
American
CareSource
214-596-2464
I think that in the
context of scanning E-mail, where executables are normally banned, this switch
has far less risk of a false positive. Generally, virus scanners in
Declude are only run on executables and _javascript_, and most executables are
in fact viruses. On a desktop or server, there are far more executables
that could be legitimate and the extra heuristics might be
unwanted.
Matt
marc wrote:
really rare information about the /AI Switch...
just found this about "Neural network":
http://www.f-prot.com/support/windows/fpwin_faq/17.html
We will not use it, because increases the risk of false alarms.
marc
At 03:55 29.03.2006, you wrote:
What is the value of the "AI" switch? I see it (and others related)
explained on the F-Prot web site, but I don't understand why one would
use it or not use it. Nor does it tell you what the default is.
/HEUR - Uses heuristic scanning of files.
/NOHEUR - Doesn't use heuristic scanning of files.
/AI - Uses Neural network heuristic scanning of files.
/NOAI - Doesn't use Neural network heuristic scanning of files.
-------- Original Message --------
From: "Colbeck, Andrew" <[EMAIL PROTECTED]>
Sent: Tuesday, March 28, 2006 11:53 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] F-Prot Switches
#Dec-10-2004 AC Note that I've added 'ai' and 'packed' to the switches
suggested in the manual. The noboot and nomem options
# are not listed when you ask fpcmd.exe for help, but they
are definitely in the logs.
SCANFILE D:\F-Prot\fpcmd.exe /ai /server /archive=5 /packed /dumb
/noboot /nomem /silent /report=report.txt
Andrew 8)
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Reimer
Sent: Tuesday, March 28, 2006 8:46 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] F-Prot Switches
After seeing Matt's response I'm curious what other users are
using for their F-prot switches. Some of the switches Matt
uses seem like they should be used but Declude does not
include them in the config shown in their EVA manual. What do
the majority of you all use?
Mark Reimer
IT Project Manager
American CareSource
214-596-2464
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
[Scanned for viruses by Declude]
[Scanned for viruses by Declude]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
|
