MailWatch and McAfee

[Daniel Zajd]

I just have to say, Great work!!

But I need some help. How should the expression for McAfee look like?

The log look like this:
Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages,
62658 bytes
Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting
Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning:
Starting
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said
"/dev/shm/6710/h5L0FoD9006755/dr.scr"
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "        Found the
W32/Ganda at MM virus !!!"
Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr        Found
the W32/Ganda at MM virus !!!
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1
infections
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses
Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus
hidden in a screensaver (dr.scr)

And MailWatch show:
Report:  /h5L0FoD9006755/dr.scr        Found the W32/Ganda at MM virus !!!
Windows Screensavers are often used to hide viruses (dr.scr)

//Daniel Zajd
Mailsystem Sweden


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030621/ba360b40/attachment.html