Re: [Declude.Virus] Prescaning the party
- Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 29, 2002 4:57 PM Subject: Re: [Declude.Virus] Prescaning the party > >BTW, someone just sent me a copy, and fprot did not identify the virus > >correctly, notification said unknown virus. > > That's right. You can search the archives of this list for more details > (it doesn't actually detect the virus, it reports it as a suspicious file). > -Scott > With the updates from f-prot it does identify the virus.. and you can remove the VIRUSCODE 8. This is what I have done and it seems to be catching it find and identifying it Bennie --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: DSN:Re: [Declude.Virus] Prescaning the party
Thank you all the new defs did the job correctly - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 29, 2002 10:08 PM Subject: DSN:Re: [Declude.Virus] Prescaning the party > F-prot did not correctly identify the virus for us till we updated the def's at > aprox 1:30pm est time today. These appear to be diffent def's than were > available in the am though the file names and sizes are the same. > > Stu > > > At 09:53 PM 01/29/2002 -, you wrote: > >And if I don't have a prescan line, the default is on or off ? > > > >BTW, someone just sent me a copy, and fprot did not identify the virus > >correctly, notification said unknown virus. > >others said here they were correctly identifying the virus, what do you > >think the problem is over here ? > >Prescan default to on ? or some other issue ? > > > >Thanks > > > > > >- Original Message - > >From: "R. Scott Perry" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Tuesday, January 29, 2002 7:39 PM > >Subject: Re: [Declude.Virus] Prescaning the party > > > > > >> > >> >I don't think I ever used the prescan, but just to make sure, how do you > >> >turn it off ? > >> > >> You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg > >> file). > >> > >> >manual.html does not mention prescan > >> > >> Thanks for pointing that out -- we're putting a list of additions to make > >> to the manual. > >>-Scott > >> > >> --- > >> [This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > >> > >> This E-mail came from the Declude.Virus mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.Virus". You can E-mail > >> [EMAIL PROTECTED] for assistance. You can visit our web > >> site at http://www.declude.com . > >> > >> > > > >--- > >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > >This E-mail came from the Declude.Virus mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.Virus". You can E-mail > >[EMAIL PROTECTED] for assistance. You can visit our web > >site at http://www.declude.com . > > > > > -- --- > CSOnline Technical Support hours - Monday thru Saturday 7am - 1am > CSOnline Technical Support Numbers Seneca814-677-2447 >Clarion 814-227-3638 >Meadville 814-425-1696 >Parker724-399-1158 > http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com > -- --- > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.Virus] Prescaning the party
F-prot did not correctly identify the virus for us till we updated the def's at aprox 1:30pm est time today. These appear to be diffent def's than were available in the am though the file names and sizes are the same. Stu At 09:53 PM 01/29/2002 -, you wrote: >And if I don't have a prescan line, the default is on or off ? > >BTW, someone just sent me a copy, and fprot did not identify the virus >correctly, notification said unknown virus. >others said here they were correctly identifying the virus, what do you >think the problem is over here ? >Prescan default to on ? or some other issue ? > >Thanks > > >- Original Message - >From: "R. Scott Perry" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Tuesday, January 29, 2002 7:39 PM >Subject: Re: [Declude.Virus] Prescaning the party > > >> >> >I don't think I ever used the prescan, but just to make sure, how do you >> >turn it off ? >> >> You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg >> file). >> >> >manual.html does not mention prescan >> >> Thanks for pointing that out -- we're putting a list of additions to make >> to the manual. >>-Scott >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". You can E-mail >> [EMAIL PROTECTED] for assistance. You can visit our web >> site at http://www.declude.com . >> >> > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > > - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
F-Prot has new Def data today 1/29/02 that fix the identity issue. Chris At 09:53 PM 01/29/2002 +, you wrote: >And if I don't have a prescan line, the default is on or off ? > >BTW, someone just sent me a copy, and fprot did not identify the virus >correctly, notification said unknown virus. >others said here they were correctly identifying the virus, what do you >think the problem is over here ? >Prescan default to on ? or some other issue ? > >Thanks --- [This E-mail scanned for viruses by Declude/F-Prot Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
>And if I don't have a prescan line, the default is on or off ? The default is off. The problem can only occur if the line "PRESCAN ON" is present. >BTW, someone just sent me a copy, and fprot did not identify the virus >correctly, notification said unknown virus. That's right. You can search the archives of this list for more details (it doesn't actually detect the virus, it reports it as a suspicious file). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
And if I don't have a prescan line, the default is on or off ? BTW, someone just sent me a copy, and fprot did not identify the virus correctly, notification said unknown virus. others said here they were correctly identifying the virus, what do you think the problem is over here ? Prescan default to on ? or some other issue ? Thanks - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 29, 2002 7:39 PM Subject: Re: [Declude.Virus] Prescaning the party > > >I don't think I ever used the prescan, but just to make sure, how do you > >turn it off ? > > You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg > file). > > >manual.html does not mention prescan > > Thanks for pointing that out -- we're putting a list of additions to make > to the manual. >-Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
>I don't think I ever used the prescan, but just to make sure, how do you >turn it off ? You would just change the PRESCAN ON line to PRESCAN OFF (in the virus.cfg file). >manual.html does not mention prescan Thanks for pointing that out -- we're putting a list of additions to make to the manual. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
Hi, I don't think I ever used the prescan, but just to make sure, how do you turn it off ? manual.html does not mention prescan also, I am asking for the second time, someone please send me a copy of "my party" thanks - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 29, 2002 7:13 PM Subject: Re: [Declude.Virus] Prescaning the party > > > I tried turning off PRESCAN and suddenly there were > >a flood of full catches (not even error code 8). > > FYI, we have discovered an issue where the prescanning can attempt to scan > non-HTML files, which could cause this. > > Until we have a fix for this, it is recommended to turn prescanning off. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Prescaning the party
> I tried turning off PRESCAN and suddenly there were >a flood of full catches (not even error code 8). FYI, we have discovered an issue where the prescanning can attempt to scan non-HTML files, which could cause this. Until we have a fix for this, it is recommended to turn prescanning off. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Prescaning the party
I had updated to F-prot January 28 definitions and did even not get any virus errorcode 8 warnings yesterday. It's possible that I got a Jan 28 update that someone else got that won't even detect the Party at all. However after updating to Jan 29 F-prot definitions, there were still no blocks. I tried turning off PRESCAN and suddenly there were a flood of full catches (not even error code 8). Since they seemed as regular as a clock, I turned prescan back ON. No more catches for a minute. I turned it back off and began catching them again. This is all very unscientific, but there may be an interaction with PRESCAN and the Party virus in some virus.cfgs. (Scott, this is the same virus.cfg in my other report). --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
