New release of Vispan
David While
David.While at UCE.AC.UK
Mon Nov 29 19:18:33 GMT 2004
[ The following text is in the "utf-8" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Thanks - I have incorporated into the next version. Also I have found why it wasn't detecting the log entry for the virus - this has also been fixed.
The virus list on the front page is the daily list.
David While
-----Original Message-----
From: MailScanner mailing list on behalf of Marcel Blenkers
Sent: Mon 29/11/2004 14:06
To: MAILSCANNER at JISCMAIL.AC.UK
Cc:
Subject: Re: New release of Vispan
Hi and sorry for my late Answer..
and please check my question below everything ;)
Thanks in advance
> The reason AntiVir doesn't appear in the config page is that it isn't
> configured to do so. I only have access to a limited number of virus
> scanners. If you can provide me with the command line option to print
> out the version information (usually -v or -info) and what it actually
> prints - I will add in the support.
>
ok..
here we go:
First the Version-Info
The Command seems to be
antivir --version
The output is as follows:
marcel at marcel:~> antivir --version
6.28.0.19
operating system: Linux (glibc 2.0)
product version: 2.1.2-15
engine version: 6.28.0.19
packlib version: 2.0.3.17 (supports 24 formats)
vdf version: 6.28.0.95
product: AntiVir Workstation
key file: hbedv.key
registered user: Marcel Blenkers, Berlin
serial number: 1001061079
key expires: 31 Mar 2005
run mode: PERSONAL
product: AntiVir MailGate
key file: hbedv.key
registered user: Marcel Blenkers, Berlin
serial number: 1001061079
key expires: 31 Mar 2005
run mode: PERSONAL
product: AntiVir (command line scanner)
key file: hbedv.key
registered user: Marcel Blenkers, Berlin
serial number: 1001061079
key expires: 31 Mar 2005
run mode: PERSONAL
Now the Logfile-Entry for the Virus called TR/Pish.Telekom.A
Nov 29 14:59:45 marcel sendmail[17691]: iATDxiEK017689:
to=<marcel at aqua-europe.c
om>, delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=120358,
relay=localhost.
netfinish.de. [127.0.0.1], dsn=2.0.0, stat=Sent (iATDxiV3017692 Message
accepted
for delivery)
Nov 29 14:59:47 marcel MailScanner[14419]: New Batch: Scanning 1 messages,
4314
bytes
Nov 29 14:59:47 marcel MailScanner[14419]: Spam Checks: Starting
Nov 29 14:59:57 marcel MailScanner[14419]: Virus and Content Scanning:
Starting
Nov 29 14:59:59 marcel MailScanner[14419]: ALERT: [TR/Pish.Telekom.A
virus] ./iATDxiV3017692/Viren.zip --> dfiAFJ8M9V013462 <<< The Trojan
horse TR/Pish.Telekom.A
Nov 29 14:59:59 marcel MailScanner[14419]: ALERT: [TR/Pish.Telekom.A
virus] ./iATDxiV3017692/Viren.zip --> msg-10870-14.txt <<< The Trojan
horse TR/Pish.Telekom.A
Nov 29 14:59:59 marcel MailScanner[14419]: ALERT: [TR/Pish.Telekom.A
virus] ./iATDxiV3017692/dfiAFJ8M9V013462 <<< The Trojan horse
TR/Pish.Telekom.A
Nov 29 14:59:59 marcel MailScanner[14419]: ALERT: [TR/Pish.Telekom.A
virus] ./iATDxiV3017692/msg-10870-14.txt <<< The Trojan horse
TR/Pish.Telekom.A
Nov 29 14:59:59 marcel MailScanner[14419]: Virus Scanning: AntiVir found 4
infections
Nov 29 15:00:01 marcel MailScanner[14419]: Infected message iATDxiV3017692
came from 127.0.0.1
Nov 29 15:00:01 marcel MailScanner[14419]: Saved entire message to
/var/spool/MailScanner/quarantine/20041129/iATDxiV3017692
Nov 29 15:00:01 marcel MailScanner[14419]: Saved infected
"msg-10870-14.txt" to
/var/spool/MailScanner/quarantine/20041129/iATDxiV3017692
Nov 29 15:00:01 marcel MailScanner[14419]: Saved infected
"dfiAFJ8M9V013462" to
/var/spool/MailScanner/quarantine/20041129/iATDxiV3017692
Nov 29 15:00:01 marcel MailScanner[14419]: Saved infected "Viren.zip" to
/var/spool/MailScanner/quarantine/20041129/iATDxiV3017692
Nov 29 15:00:02 marcel MailScanner[14419]: Silent: Delivered 1 messages
containing silent viruses
Now some other Question
On the Index.html created with vispan and the cronjob there is the
table called
Top Viruses
is this table only for the current day or for all viruses found together?
as this table is empty again :(
To see the current Vispan on my site check
http://www.irc-addicts.de/vispan/
maybe i missconfigured something..
Thanks in advance and i hope i was of some help
Marcel
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list