Re: [Declude.Virus] fprot 3.12b and declude?

2003-08-30 Thread Mike Nice
One slight quirk with F-Prot's FPCMD.EXE:  If you execute it with a
/? argument, it prints help.   The Help shows the commands beginning with
dashes.   FPCMD.EXE recognizes the dashes as commands, however it fails to
remove them from the argument list and ends up scanning for the arguments as
additional file specifications.

   The end result is the same but it requires more work to get there.
Probably not even a measurable impact on performance though.   So the
command below might be

SCANFILE  X:\Progra~1\FSI\F-Prot\fpcmd.EXE /TYPE /SILENT /NOMEM /ARCHIVE
/NOBOOT /DUMB /REPORT=report.txt

- Original Message - 
From: "Frederick P. Squib, Jr." <[EMAIL PROTECTED]>
Subject: RE: [Declude.Virus] fprot 3.12b and declude?


> SCANFILE  X:\Progra~1\FSI\F-Prot\fpcmd.EXE -TYPE -SILENT -NOMEM -ARCHIVE
> -NOBOOT -DUMB -REPORT=report.txt

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-08 Thread Jim Rooth

Just remembered, last time I played ostrich, I got my tail kicked.
Changed virus.cfg to reflect new file name and dropped the -nofloppy.
Tested with eicar and everything was caught.

Jim Rooth
KLOTRON,INC.
Office: 817.654.3018.103
Home: 972.606.6341
Mobile: 214.244.0979
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P.
Squib, Jr.
Sent: Tuesday, October 08, 2002 07:24
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and declude?

It doesn't appear that -nomem, -nofloppy, and -noboot is supported in
the fpcmd.exe version, however I have contacted f-prot (frisk software)
and I am still waiting for a reply...should hear back from them later
today.

I uninstalled and reinstalled the windows b version, changed back to
f-prot.exe in my config file and have not seen any popups since.

Fritz

Frederick P. Squib, Jr.
Network Administrator
Citizens Internet Services
http://www.wpa.net


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Franco Celli
Sent: Tuesday, October 08, 2002 7:54 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and declude?


For Win32 FPCMD.EXE remove the -NOFLOPPY option, it isn't supported by
that
version.


-
Franco Celli
[EMAIL PROTECTED]

---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude
Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Citizens Internet Services with
Declude Virus v 1.61]



---
[This E-mail scanned for viruses by Citizens Internet Services with
Declude Virus v 1.61]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-08 Thread Frederick P. Squib, Jr.

It doesn't appear that -nomem, -nofloppy, and -noboot is supported in
the fpcmd.exe version, however I have contacted f-prot (frisk software)
and I am still waiting for a reply...should hear back from them later
today.

I uninstalled and reinstalled the windows b version, changed back to
f-prot.exe in my config file and have not seen any popups since.

Fritz

Frederick P. Squib, Jr.
Network Administrator
Citizens Internet Services
http://www.wpa.net


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Franco Celli
Sent: Tuesday, October 08, 2002 7:54 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and declude?


For Win32 FPCMD.EXE remove the -NOFLOPPY option, it isn't supported by
that
version.


-
Franco Celli
[EMAIL PROTECTED]

---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude
Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Citizens Internet Services with
Declude Virus v 1.61]



---
[This E-mail scanned for viruses by Citizens Internet Services with Declude Virus v 
1.61]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-08 Thread Mike Wiegers

Looks like that fixed this problem. Thanks..
Mike

-Original Message-

For Win32 FPCMD.EXE remove the -NOFLOPPY option, it isn't supported by
that version.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-08 Thread Jim Rooth

I have seen no problems.  I do not monitor the server constantly though.
I do it remotely along with several other jobs.  Only hit it usually
once a day.  If there are any popups, Terminal Server does not show them
and the popups do not seem to be stopping the detections.  Caught 147
yesterday.  I guess I am going to play ostrich and make like nothing is
happening...

Jim Rooth
KLOTRON,INC.
Office: 817.654.3018.103
Home: 972.606.6341
Mobile: 214.244.0979
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Dan Shadix
Sent: Monday, October 07, 2002 17:00
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] fprot 3.12b and declude?

I can't figure out what I'm doing wrong.  I'm using the windows version
and ran the upgrade to 3.12b right after it came out.  I haven't had any

problems at all.  Are there any others out there?

Seriously though, I'm concerned that something might be wrong that I'm
just missing and it will come back to bite me later.

Dan

Mike Wiegers wrote:
> I just  changed from
> \F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB
> /REPORT=report.txt
> to
> \fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOFLOPPY -NOBOOT -DUMB
> -REPORT=report.txt
>
> and it still doesn't catch the EICAR test virus (the F-Prot line will
> catch it). What did I miss?
>
> Thanks
> Mike
>
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of *John
Dobbin
> *Sent:* Monday, October 07, 2002 4:32 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* Re: [Declude.Virus] fprot 3.12b and declude?
>
> The switches for the executable change from /option to -option.
We
> made the change and so far so good.
>
>
> John Dobbin
> Pen Publishing Interactive
>
> - Original Message -
> *From:* Mike Wiegers <mailto:[EMAIL PROTECTED]>
>         *To:* [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
> *Sent:* Monday, October 07, 2002 4:27 PM
> *Subject:* RE: [Declude.Virus] fprot 3.12b and declude?
>
> I was having this problem so I went  back to 3.12a. I updated
> again and changed my virus.cfg to fpcmd.exe. I ran the test
> EICAR_Test_File and the log reported that is was clean and it
> did sent the com test file. Changed the line back to
f-prot.exe
> and it caught the virus. This was all done with 3.12b. Anyone
> else have any problems with the new command line?
>
> Mike
>
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of
>         *Frederick P. Squib, Jr.
> *Sent:* Monday, October 07, 2002 1:20 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* RE: [Declude.Virus] fprot 3.12b and declude?
>
> I may have missed this if ti was posted earlier, but the
> fine folks a f-prot said...
>
>
> Dear Frederick,
>
> Please use FPCMD.EXE instead of F-Prot.EXE with the same
>
> command line switches.
>
> Best regards,
>
> Arnar Thor
>
>
>
> At 22:40 3.10.2002 -0400, you wrote:
>
>>I have been seeing this popping up on my screen and in the
> event log
>
>>since upgrading to the 312b version of f-prot today 3
> October 2002.
>
>>Running the command line version on win2k Advanced server.
>
>>
>
>>Application popup: 16 bit MS-DOS Subsystem :
>
>>C:\Progra~1\FSI\F-Prot\F-Prot.exe
>
>>X#=0D, CS=01CF IP=5703. The NTVDM CPU has encountered an
> unhandled
>
>>exception. Choose 'Close' to terminate the application.
>
>>
>
>>Any suggestions ?
>
>>
>
>>Frederick P. Squib, Jr.
>
>>Customer #X
>
>>Network Administrator
>
>>Citizens Internet Services
>
>>_http://www.wpa.net_ <http://www.wpa.net/>
>
>>
>
>
>
> Frederick P. Squib, Jr.
>         Network Administrator
>     Citizens Internet Services
> http://www.wpa.net <http://www.wpa.net/>
>
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of
> *Scott MacLean
> *Sent:* Thursday, October 03, 2002 5:40 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* Re: [Declude.Virus] fprot 3.12b and
declude?
>
> I've been getting a lot (2-3/day) of these

RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-08 Thread Franco Celli

For Win32 FPCMD.EXE remove the -NOFLOPPY option, it isn't supported by that
version.


-
Franco Celli
[EMAIL PROTECTED]

---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread Sheldon Koehler

When 3.12a came out, we had the same problem when we upgraded from 3.11b. I
unded up uninstalling the whole program and reinstalling from scratch. The
missing f-prot.exe file mysteriously showed up. And it was the same download
file!!!

Give this a try, as it may work.

Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

"Whenever you find yourself on the side of the majority, it's time
to pause and reflect." Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread Dan Shadix

I can't figure out what I'm doing wrong.  I'm using the windows version 
and ran the upgrade to 3.12b right after it came out.  I haven't had any 
problems at all.  Are there any others out there?

Seriously though, I'm concerned that something might be wrong that I'm 
just missing and it will come back to bite me later.

Dan

Mike Wiegers wrote:
> I just  changed from
> \F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB 
> /REPORT=report.txt
> to
> \fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOFLOPPY -NOBOOT -DUMB 
> -REPORT=report.txt
>  
> and it still doesn't catch the EICAR test virus (the F-Prot line will 
> catch it). What did I miss?
>  
> Thanks
> Mike
> 
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of *John Dobbin
> *Sent:* Monday, October 07, 2002 4:32 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* Re: [Declude.Virus] fprot 3.12b and declude?
> 
> The switches for the executable change from /option to -option.  We
> made the change and so far so good.
>  
>  
> John Dobbin
> Pen Publishing Interactive
> 
> - Original Message -
> *From:* Mike Wiegers <mailto:[EMAIL PROTECTED]>
>         *To:* [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> *Sent:* Monday, October 07, 2002 4:27 PM
> *Subject:* RE: [Declude.Virus] fprot 3.12b and declude?
> 
> I was having this problem so I went  back to 3.12a. I updated
> again and changed my virus.cfg to fpcmd.exe. I ran the test
> EICAR_Test_File and the log reported that is was clean and it
> did sent the com test file. Changed the line back to f-prot.exe
> and it caught the virus. This was all done with 3.12b. Anyone
> else have any problems with the new command line?
>  
> Mike
> 
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of
>         *Frederick P. Squib, Jr.
> *Sent:* Monday, October 07, 2002 1:20 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* RE: [Declude.Virus] fprot 3.12b and declude?
> 
> I may have missed this if ti was posted earlier, but the
> fine folks a f-prot said...
>  
> 
> Dear Frederick,
> 
> Please use FPCMD.EXE instead of F-Prot.EXE with the same
> 
> command line switches.
> 
> Best regards,
> 
> Arnar Thor
> 
>  
> 
> At 22:40 3.10.2002 -0400, you wrote:
> 
>>I have been seeing this popping up on my screen and in the
> event log
> 
>>since upgrading to the 312b version of f-prot today 3
> October 2002.
> 
>>Running the command line version on win2k Advanced server.
> 
>>
> 
>>Application popup: 16 bit MS-DOS Subsystem :
> 
>>C:\Progra~1\FSI\F-Prot\F-Prot.exe
> 
>>X#=0D, CS=01CF IP=5703. The NTVDM CPU has encountered an
> unhandled
> 
>>exception. Choose 'Close' to terminate the application.
> 
>>
> 
>>Any suggestions ?
> 
>>
> 
>>Frederick P. Squib, Jr.
> 
>>Customer #X
> 
>>Network Administrator
> 
>>Citizens Internet Services
> 
>>_http://www.wpa.net_ <http://www.wpa.net/>
> 
>>
> 
>  
>  
> Frederick P. Squib, Jr.
>         Network Administrator
>         Citizens Internet Services
> http://www.wpa.net <http://www.wpa.net/>
> 
> -Original Message-
> *From:* [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] *On Behalf Of
> *Scott MacLean
> *Sent:* Thursday, October 03, 2002 5:40 PM
> *To:* [EMAIL PROTECTED]
> *Subject:* Re: [Declude.Virus] fprot 3.12b and declude?
> 
> I've been getting a lot (2-3/day) of these pop-up boxes
> since upgrading:
> 
> Application popup: 16 bit MS-DOS Subsystem :
> C:\Progra~1\FSI\F-Prot\F-Prot.exe
> X#=0D, CS=01CF IP=5703. The NTVDM CPU has
> encountered an unhandled exception. Choose 'Close' to
> terminate the application.
> 
> At 05:08 PM 10/3/2002, Jim Jones, Jr. wrote:
> 
>> any known problems in running this new version of fprot?
>>
>> Than

RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread Mike Wiegers
Title: Message



I 
just  changed from
\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB 
/REPORT=report.txt
to
\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOFLOPPY -NOBOOT -DUMB 
-REPORT=report.txt
 
and 
it still doesn't catch the EICAR test virus (the F-Prot line will catch it). 
What did I miss?
 
Thanks
Mike

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On 
  Behalf Of John DobbinSent: Monday, October 07, 2002 4:32 
  PMTo: [EMAIL PROTECTED]Subject: Re: 
  [Declude.Virus] fprot 3.12b and declude?
  The switches for the executable change from 
  /option to -option.  We made the change and so far so good.
   
   
  John DobbinPen Publishing Interactive
  
- Original Message - 
From: 
Mike Wiegers 

To: [EMAIL PROTECTED] 
Sent: Monday, October 07, 2002 4:27 
PM
Subject: RE: [Declude.Virus] fprot 
3.12b and declude?

I 
was having this problem so I went  back to 3.12a. I updated again and 
changed my virus.cfg to fpcmd.exe. I ran the test EICAR_Test_File and the log reported that is was clean and it did 
sent the com test file. Changed the line back to f-prot.exe and it caught 
the virus. This was all done with 3.12b. Anyone else have any problems with 
the new command line?
 
Mike

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Frederick P. Squib, Jr.Sent: Monday, 
  October 07, 2002 1:20 PMTo: 
  [EMAIL PROTECTED]Subject: RE: [Declude.Virus] fprot 
  3.12b and declude?
  I may have missed this if ti was posted earlier, but the fine folks 
  a f-prot said...
   
  
  Dear Frederick,
  Please use FPCMD.EXE instead of F-Prot.EXE with the 
  same
  command line switches.
  Best regards,
  Arnar Thor
   
  At 22:40 3.10.2002 -0400, you wrote:
  >I have been seeing this popping up on my screen and in 
  the event log
  >since upgrading to the 312b version of f-prot today 3 
  October 2002.
  >Running the command line version on win2k Advanced 
  server.
  >
  >Application popup: 16 bit MS-DOS Subsystem 
:
  >C:\Progra~1\FSI\F-Prot\F-Prot.exe
  >X#=0D, CS=01CF IP=5703. The NTVDM CPU has 
  encountered an unhandled
  >exception. Choose 'Close' to terminate the 
  application.
  >
  >Any suggestions ?
  >
  >Frederick P. Squib, Jr.
  >Customer #X
  >Network Administrator
  >Citizens Internet Services
  >http://www.wpa.net
  >
   
   
  Frederick P. Squib, 
  Jr.
  Network Administrator
  Citizens Internet 
  Services
  http://www.wpa.net
  

-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
On Behalf Of Scott MacLeanSent: Thursday, October 03, 
2002 5:40 PMTo: [EMAIL PROTECTED]Subject: 
Re: [Declude.Virus] fprot 3.12b and declude?I've been getting a lot (2-3/day) of these pop-up boxes since 
upgrading:Application popup: 16 bit MS-DOS Subsystem : 
C:\Progra~1\FSI\F-Prot\F-Prot.exeX#=0D, CS=01CF IP=5703. The 
NTVDM CPU has encountered an unhandled exception. Choose 'Close' to 
terminate the application. At 05:08 PM 10/3/2002, Jim Jones, Jr. 
wrote:
any known problems in 
  running this new version of 
  fprot?Thanks,Jim---[This E-mail was scanned 
  for viruses by Declude Virus 
  (http://www.declude.com)]---This E-mail came from the 
  Declude.Virus mailing list.  Tounsubscribe, just send an 
  E-mail to [EMAIL PROTECTED], andtype "unsubscribe 
  Declude.Virus".    The archives can be foundat http://www.mail-archive.com.___Scott MacLean[EMAIL PROTECTED]ICQ: 9184011http://www.nerosoft.com


Re: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread John Dobbin
Title: Message



The switches for the executable change from /option 
to -option.  We made the change and so far so good.
 
 
John DobbinPen Publishing Interactive

  - Original Message - 
  From: 
  Mike Wiegers 
  
  To: [EMAIL PROTECTED] 
  Sent: Monday, October 07, 2002 4:27 
  PM
  Subject: RE: [Declude.Virus] fprot 3.12b 
  and declude?
  
  I 
  was having this problem so I went  back to 3.12a. I updated again and 
  changed my virus.cfg to fpcmd.exe. I ran the test EICAR_Test_File 
  and the log reported that is was clean and it did sent the com test file. 
  Changed the line back to f-prot.exe and it caught the virus. This was all done 
  with 3.12b. Anyone else have any problems with the new command 
  line?
   
  Mike
  

-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
On Behalf Of Frederick P. Squib, Jr.Sent: Monday, October 
07, 2002 1:20 PMTo: [EMAIL PROTECTED]Subject: 
RE: [Declude.Virus] fprot 3.12b and declude?
I 
may have missed this if ti was posted earlier, but the fine folks a f-prot 
said...
 

Dear Frederick,
Please use FPCMD.EXE instead of F-Prot.EXE with the 
same
command line switches.
Best regards,
Arnar Thor
 
At 22:40 3.10.2002 -0400, you wrote:
>I have been seeing this popping up on my screen and in 
the event log
>since upgrading to the 312b version of f-prot today 3 
October 2002.
>Running the command line version on win2k Advanced 
server.
>
>Application popup: 16 bit MS-DOS Subsystem :
>C:\Progra~1\FSI\F-Prot\F-Prot.exe
>X#=0D, CS=01CF IP=5703. The NTVDM CPU has 
encountered an unhandled
>exception. Choose 'Close' to terminate the 
application.
>
>Any suggestions ?
>
>Frederick P. Squib, Jr.
>Customer #X
>Network Administrator
>Citizens Internet Services
>http://www.wpa.net
>
 
 
Frederick P. Squib, Jr.
Network Administrator
Citizens Internet 
Services
http://www.wpa.net

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Scott MacLeanSent: Thursday, October 03, 
  2002 5:40 PMTo: [EMAIL PROTECTED]Subject: 
  Re: [Declude.Virus] fprot 3.12b and declude?I've been getting a lot (2-3/day) of these pop-up boxes since 
  upgrading:Application popup: 16 bit MS-DOS Subsystem : 
  C:\Progra~1\FSI\F-Prot\F-Prot.exeX#=0D, CS=01CF IP=5703. The NTVDM 
  CPU has encountered an unhandled exception. Choose 'Close' to terminate 
  the application. At 05:08 PM 10/3/2002, Jim Jones, Jr. 
  wrote:
  any known problems in running 
this new version of fprot?Thanks,Jim---[This 
E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]---This E-mail came from the 
Declude.Virus mailing list.  Tounsubscribe, just send an E-mail 
to [EMAIL PROTECTED], andtype "unsubscribe 
Declude.Virus".    The archives can be foundat http://www.mail-archive.com.___Scott MacLean[EMAIL PROTECTED]ICQ: 9184011http://www.nerosoft.com


RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread Mike Wiegers
Title: Message



I was 
having this problem so I went  back to 3.12a. I updated again and changed 
my virus.cfg to fpcmd.exe. I ran the test EICAR_Test_File and the 
log reported that is was clean and it did sent the com test file. Changed the 
line back to f-prot.exe and it caught the virus. This was all done with 3.12b. 
Anyone else have any problems with the new command 
line?
 
Mike

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On 
  Behalf Of Frederick P. Squib, Jr.Sent: Monday, October 07, 2002 
  1:20 PMTo: [EMAIL PROTECTED]Subject: RE: 
  [Declude.Virus] fprot 3.12b and declude?
  I 
  may have missed this if ti was posted earlier, but the fine folks a f-prot 
  said...
   
  
  Dear Frederick,
  Please use FPCMD.EXE instead of F-Prot.EXE with the 
  same
  command line switches.
  Best regards,
  Arnar Thor
   
  At 22:40 3.10.2002 -0400, you wrote:
  >I have been seeing this popping up on my screen and in the 
  event log
  >since upgrading to the 312b version of f-prot today 3 
  October 2002.
  >Running the command line version on win2k Advanced 
  server.
  >
  >Application popup: 16 bit MS-DOS Subsystem :
  >C:\Progra~1\FSI\F-Prot\F-Prot.exe
  >X#=0D, CS=01CF IP=5703. The NTVDM CPU has encountered 
  an unhandled
  >exception. Choose 'Close' to terminate the 
  application.
  >
  >Any suggestions ?
  >
  >Frederick P. Squib, Jr.
  >Customer #X
  >Network Administrator
  >Citizens Internet Services
  >http://www.wpa.net
  >
   
   
  Frederick P. Squib, Jr.
  Network Administrator
  Citizens Internet 
Services
  http://www.wpa.net
  

-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
On Behalf Of Scott MacLeanSent: Thursday, October 03, 2002 
    5:40 PMTo: [EMAIL PROTECTED]Subject: Re: 
[Declude.Virus] fprot 3.12b and declude?I've been getting a lot (2-3/day) of these pop-up boxes since 
upgrading:Application popup: 16 bit MS-DOS Subsystem : 
C:\Progra~1\FSI\F-Prot\F-Prot.exeX#=0D, CS=01CF IP=5703. The NTVDM 
CPU has encountered an unhandled exception. Choose 'Close' to terminate the 
application. At 05:08 PM 10/3/2002, Jim Jones, Jr. wrote:
any known problems in running 
  this new version of fprot?Thanks,Jim---[This 
  E-mail was scanned for viruses by Declude Virus 
  (http://www.declude.com)]---This E-mail came from the 
  Declude.Virus mailing list.  Tounsubscribe, just send an E-mail 
  to [EMAIL PROTECTED], andtype "unsubscribe 
  Declude.Virus".    The archives can be foundat http://www.mail-archive.com.___Scott MacLean[EMAIL PROTECTED]ICQ: 9184011http://www.nerosoft.com


RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Brad Bond

does anybody have a new batch file for f-prot they can send me, mine hasn't
been updating for over a month now, and i just tried changing the path for
the /pub/dos but i noticed when it runs it says something about the login
was incorrect it worked flawlessly for about 8 months but i can't figure
this out.  Also my F-Prot.exe is dated back from may do i need to update
this somehow?

Thanks in advance,

Brad Bond

-Original Message-
From: Jerry Murdock [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 07, 2002 2:38 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] fprot 3.12b and Declude?


They've changed the location of the "real" dos files on the ftp server. 
They are now in /pub/dos.  There are symlinks in /pub, but wget
can be a little flaky when following symlinks.

It's probably best to change the location for the "fp-3*.zip" to
"dos/fp-3*.zip" to insure minimal duplicate downloads.

Jerry

- Original Message -
From: "John Tolmachoff" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 07, 2002 2:58 PM
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?


> >fpcmd ships with the Windows version. It's a Win32 console command line
> >version of F-Prot
>
> Thanks Jerry.
>
> Your script is just keeps on running and running and running and...
>
> :-)>
>
> John Tolmachoff
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Dan Spangenberg

Just to clarify, is the new dos version f-prot.exe file dated 09/23/02 2:21
pm and sized at 356,788?

It looks as if mine also got updated automatically by the batch file.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jerry Murdock
Sent: Monday, October 07, 2002 1:38 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] fprot 3.12b and Declude?


They've changed the location of the "real" dos files on the ftp server.
They are now in /pub/dos.  There are symlinks in /pub, but wget
can be a little flaky when following symlinks.

It's probably best to change the location for the "fp-3*.zip" to
"dos/fp-3*.zip" to insure minimal duplicate downloads.

Jerry

- Original Message -
From: "John Tolmachoff" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 07, 2002 2:58 PM
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?


> >fpcmd ships with the Windows version. It's a Win32 console command line
> >version of F-Prot
>
> Thanks Jerry.
>
> Your script is just keeps on running and running and running and...
>
> :-)>
>
> John Tolmachoff
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Jerry Murdock

They've changed the location of the "real" dos files on the ftp server. 
They are now in /pub/dos.  There are symlinks in /pub, but wget
can be a little flaky when following symlinks.

It's probably best to change the location for the "fp-3*.zip" to
"dos/fp-3*.zip" to insure minimal duplicate downloads.

Jerry

- Original Message -
From: "John Tolmachoff" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 07, 2002 2:58 PM
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?


> >fpcmd ships with the Windows version. It's a Win32 console command line
> >version of F-Prot
>
> Thanks Jerry.
>
> Your script is just keeps on running and running and running and...
>
> :-)>
>
> John Tolmachoff
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread John Tolmachoff

Yup. Just checked and the script I use from Jerry updated it to the new
version.

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Bill Beach
Sent: Monday, October 07, 2002 11:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?

Along the same lines, it looks as though they've finally made the DOS
version on 3.12b available.

-Bill

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Bill Beach

Along the same lines, it looks as though they've finally made the DOS
version on 3.12b available.

-Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread John Tolmachoff

>fpcmd ships with the Windows version. It's a Win32 console command line
>version of F-Prot

Thanks Jerry.

Your script is just keeps on running and running and running and...

:-)>

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Frederick P. Squib, Jr.

John,
 I'm using the windows version, 40 bucks to include the updater and
multiple liscenses to install on other machines was hard to pass up.

I started getting the exact same error messages about 2X per day after
upgrading to the b version. I changed it in my virus.cfg file and it
seems to be working properly again...will have to keep an eye on it over
night to see if it throws up again.

Looks like declude/fprot would continue to run after even after throwing
an error message, I wonder if it was erroring on a particular virus or
on the way a message was formatted...may warrant further investigation.


Fritz

Frederick P. Squib, Jr.
Network Administrator
Citizens Internet Services
http://www.wpa.net


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Monday, October 07, 2002 2:37 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?


Is that with the Windows version or the DOS version?

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P.
Squib, Jr.
Sent: Monday, October 07, 2002 11:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?

I may have missed this if it was posted earlier, but the fine folks a
f-prot said...
 
Dear Frederick,
Please use FPCMD.EXE instead of F-Prot.EXE with the same
command line switches.
Best regards,
Arnar Thor


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Citizens Internet Services with
Declude Virus v 1.61]



---
[This E-mail scanned for viruses by Citizens Internet Services with Declude Virus v 
1.61]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread Jerry Murdock

fpcmd ships with the Windows version. It's a Win32 console command line
version of F-Prot.

Jerry
- Original Message -
From: "John Tolmachoff" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 07, 2002 2:37 PM
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?


Is that with the Windows version or the DOS version?

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P.
Squib, Jr.
Sent: Monday, October 07, 2002 11:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?

I may have missed this if it was posted earlier, but the fine folks a
f-prot said...

Dear Frederick,
Please use FPCMD.EXE instead of F-Prot.EXE with the same
command line switches.
Best regards,
Arnar Thor


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and Declude?

2002-10-07 Thread John Tolmachoff

Is that with the Windows version or the DOS version?

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P.
Squib, Jr.
Sent: Monday, October 07, 2002 11:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] fprot 3.12b and Declude?

I may have missed this if it was posted earlier, but the fine folks a
f-prot said...
 
Dear Frederick,
Please use FPCMD.EXE instead of F-Prot.EXE with the same
command line switches.
Best regards,
Arnar Thor


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] fprot 3.12b and declude?

2002-10-07 Thread Frederick P. Squib, Jr.
Title: Message



I may 
have missed this if ti was posted earlier, but the fine folks a f-prot 
said...
 

Dear Frederick,
Please use FPCMD.EXE instead of F-Prot.EXE with the 
same
command line switches.
Best regards,
Arnar Thor
 
At 22:40 3.10.2002 -0400, you wrote:
>I have been seeing this popping up on my screen and in the 
event log
>since upgrading to the 312b version of f-prot today 3 
October 2002.
>Running the command line version on win2k Advanced 
server.
>
>Application popup: 16 bit MS-DOS Subsystem :
>C:\Progra~1\FSI\F-Prot\F-Prot.exe
>X#=0D, CS=01CF IP=5703. The NTVDM CPU has encountered an 
unhandled
>exception. Choose 'Close' to terminate the 
application.
>
>Any suggestions ?
>
>Frederick P. Squib, Jr.
>Customer #X
>Network Administrator
>Citizens Internet Services
>http://www.wpa.net
>
 
 
Frederick P. Squib, Jr.
Network Administrator
Citizens Internet Services
http://www.wpa.net

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On 
  Behalf Of Scott MacLeanSent: Thursday, October 03, 2002 5:40 
  PMTo: [EMAIL PROTECTED]Subject: Re: 
  [Declude.Virus] fprot 3.12b and declude?I've 
  been getting a lot (2-3/day) of these pop-up boxes since 
  upgrading:Application popup: 16 bit MS-DOS Subsystem : 
  C:\Progra~1\FSI\F-Prot\F-Prot.exeX#=0D, CS=01CF IP=5703. The NTVDM CPU 
  has encountered an unhandled exception. Choose 'Close' to terminate the 
  application. At 05:08 PM 10/3/2002, Jim Jones, Jr. wrote:
  any known problems in running 
this new version of fprot?Thanks,Jim---[This E-mail 
was scanned for viruses by Declude Virus 
(http://www.declude.com)]---This E-mail came from the 
Declude.Virus mailing list.  Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe 
Declude.Virus".    The archives can be foundat http://www.mail-archive.com.___Scott MacLean[EMAIL PROTECTED]ICQ: 9184011http://www.nerosoft.com