Re: [Declude.Virus] log expansion

2003-01-22 Thread R. Scott Perry


I loaded 1.66 and the copy of fpcmd.exe from out of fp-win_312d_m.exe on
Monday morning. Since then my log files have grown dramatically, mostly from
the inclusion of countless lines like these:

01/20/2003 12:55:00 Q37e6146 Could not find parse string Infection in
report.txt
01/20/2003 12:55:01 Q37e6146 Error 0 in virus scanner.
01/20/2003 12:55:01 Q37e6146 Scanned: Error in virus scanner. [MIME: 1 2331]

Since I'm still investigating the failure I experienced this morning, I'm
concerned. I reverted the fpcmd.exe back to the 3.12C version, just to see
what happens, but has anyone else seen this pattern occur?


Is the SCANFILE line in the \IMail\Declude\virus.cfg file pointing to the 
correct location for the fpcmd.exe file?
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] log expansion

2003-01-22 Thread John Shacklett
Yep. I changed the name of the old one and dropped the new one right in its
place. I'm going to get a fresh copy of 3.12D and repeat the install, and do
some more Eicar testing and get this right.

Thanks for the insights.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, 22 January 2003 5:11 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] log expansion



I loaded 1.66 and the copy of fpcmd.exe from out of fp-win_312d_m.exe on
Monday morning. Since then my log files have grown dramatically, mostly
from
the inclusion of countless lines like these:

01/20/2003 12:55:00 Q37e6146 Could not find parse string Infection in
report.txt
01/20/2003 12:55:01 Q37e6146 Error 0 in virus scanner.
01/20/2003 12:55:01 Q37e6146 Scanned: Error in virus scanner. [MIME: 1
2331]

Since I'm still investigating the failure I experienced this morning, I'm
concerned. I reverted the fpcmd.exe back to the 3.12C version, just to see
what happens, but has anyone else seen this pattern occur?

Is the SCANFILE line in the \IMail\Declude\virus.cfg file pointing to the
correct location for the fpcmd.exe file?
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] log expansion

2003-01-22 Thread R. Scott Perry


Yep. I changed the name of the old one and dropped the new one right in its
place. I'm going to get a fresh copy of 3.12D and repeat the install, and do
some more Eicar testing and get this right.


If you want, you can use the debug mode (LOGLEVEL DEBUG) until at least 
one E-mail is scanned, and then E-mail me the log file off-list, and I can 
probably figure out what is happening.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] log expansion

2003-01-22 Thread John Shacklett
I think I have things back to normal. I'm writing this off to a buggered
fpcmd.exe file. As soon as I reinstalled f-prot, things started working
properly. I even caught a klez by happenstance in the middle of the eicars,
all with both scanners, so I'm going home.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, 22 January 2003 6:10 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] log expansion



Yep. I changed the name of the old one and dropped the new one right in its
place. I'm going to get a fresh copy of 3.12D and repeat the install, and
do
some more Eicar testing and get this right.

If you want, you can use the debug mode (LOGLEVEL DEBUG) until at least
one E-mail is scanned, and then E-mail me the log file off-list, and I can
probably figure out what is happening.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.