Patch for vnames.pl with sophossavi and clamavmodule.

Stijn Jonker SJCJonker at SJC.NL
Tue Aug 10 22:29:47 IST 2004


Hello,

For a while now the wonderfull vnames.pl was bugging me with incorrect
reports, ever since moving towards sophossavi and clamavmodule.

This was due to the regexp for sophossave matching both clamavmodule and
sophossavi while there being no support in the script for clamavmodule
itself.

Both use the INFECTED:: string, but are prefixed with sophossavi or
clamavmodule in turn.

I took the liberty to modify the script and add clamavmodule and tighten
the sophossavi regexp.

Patch is against vnames.pl v.2.1.2 - 4/5/2004

--
Met Vriendelijke groet/Yours Sincerely
Stijn Jonker <SJCJonker at sjc.nl>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

    [ Part 1.2: "Attached Text" ]

--- vnames.pl   2004-05-10 21:23:15.000000000 +0200
+++ vnames.pl.new       2004-08-10 23:24:59.000000000 +0200
@@ -37,7 +37,7 @@

 # Definable Vars
 $Scanner = "mcafee,clamav";
-   # comma sep: sophos,sophossavi,inoculan,clamav,command,f-prot,
+   # comma sep: sophos,sophossavi,inoculan,clamav,clamavmodule,command,f-prot,
    #            mcafee,mcafee_fr,fsecure,panda,antivir
 $HTML = "yes"; # yes|no (no=text only)
 $Sort = "count"; #count|name (count=ascending)
@@ -51,14 +51,17 @@
     Output => '>>> Virus',
     String => '>>> Virus \'(.*)\''},
   sophossavi => {
-    Output => 'INFECTED::',
-    String => 'INFECTED:: (.*)::'},
+    Output => 'SophosSAVI::INFECTED::',
+    String => 'SophosSAVI::INFECTED:: (.*)::'},
   inoculan => {
     Output => 'was infected by virus',
     String => 'was infected by virus \[(.*)\]'},
   clamav => {
     Output => 'FOUND',
     String => ':.* (.*) FOUND'},
+  clamavmodule => {
+    Output => 'ClamAVModule::INFECTED::',
+    String => 'ClamAVModule::INFECTED:: (.*)::'},
   command => {
     Output => 'Infection:',
     String => 'Infection: (.*)'},
@@ -87,6 +90,7 @@
   sophossavi => "Sophos SAVI",
   inoculan => "Inoculan",
   clamav => "ClamAV",
+  clamavmodule => "ClamAVModule",
   command => "Command",
   "f-prot" => "F-Prot",
   mcafee => "McAfee",

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

    [ Part 2, "OpenPGP digital signature"  Application/PGP-SIGNATURE  ]
    [ 161bytes. ]
    [ Unable to print this part. ]




More information about the MailScanner mailing list