OT - Clamav question
Pete Russell
pete at ENITECH.COM.AU
Thu Mar 3 10:08:07 GMT 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
I would like to try and get it to handle Bitdefender. only need to
modify ONE (or maybe 2) line of code from what i can see.
The output and string values for Bitdefender. ANy idea whgat they might be?
# Scanner Strings
my %Scanners = (
bitdefender => {
Output => '/(.+) Found virus (.*)',
String => '/(.+) Found virus (.*)\'},
sophos => {
Output => '>>> Virus',
String => '>>> Virus \'(.*)\''},
sophossavi => {
Output => 'INFECTED::',
String => 'INFECTED:: (.*)::'},
inoculan => {
Output => 'was infected by virus',
String => 'was infected by virus \[(.*)\]'},
clamav => {
Output => 'FOUND',
String => ':.* (.*) FOUND'},
command => {
Output => 'Infection:',
String => 'Infection: (.*)'},
"f-prot" => {
Output => 'Infection:',
String => 'Infection: (.*)'},
mcafee => {
Output => 'Found the',
James Gray wrote:
> On Wed, 2 Mar 2005 03:02 pm, Peter Russell wrote:
>
>>IN the past i remember some one haviong a cool script/command that would
>>show you stats on infections?
>>
>>I ahve a mailscanner machine on a PC that is suffering badly with heaps
>>of viruses and i would love to know how to find out how many or what
>>type of infections etc?
>
>
> Are you thinking of the "vnames.pl" script which produces a bullet-list of
> viruses caught and a tally for each infection?
>
> http://web.csma.biz/apps/vnames.shtml
>
> HTH,
>
> James
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
>
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list