MailWatch and McAfee

[Steve Freegard]

Hi Daniel,

This should work:  define(VIRUS_REGEX, '/(.+) Found the (\S+) virus !!!/');

I've added it to the code for the next version.

Kind regards,
Steve.


  _____

From: Daniel Zajd [mailto:daniel at ZAJD.COM]
Sent: 21 June 2003 01:33
To: MAILSCANNER at JISCMAIL.AC.UK


I just have to say, Great work!!

But I need some help. How should the expression for McAfee look like?

The log look like this:
Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages,
62658 bytes
Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting
Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning:
Starting
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said
"/dev/shm/6710/h5L0FoD9006755/dr.scr"
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "        Found the
W32/Ganda at MM virus !!!"
Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr        Found
the W32/Ganda at MM virus !!!
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1
infections
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses
Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus
hidden in a screensaver (dr.scr)

And MailWatch show:
Report:  /h5L0FoD9006755/dr.scr        Found the W32/Ganda at MM virus !!!
Windows Screensavers are often used to hide viruses (dr.scr)

//Daniel Zajd
Mailsystem Sweden



--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030624/2b2e779d/attachment.html