OT - Clamav question

Pete Russell pete at ENITECH.COM.AU
Thu Mar 3 10:08:07 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I would like to try and get it to handle Bitdefender. only need to
modify ONE (or maybe 2) line of code from what i can see.

The output and string values for Bitdefender. ANy idea whgat they might be?

# Scanner Strings
my %Scanners = (
   bitdefender => {
     Output => '/(.+) Found virus (.*)',
     String => '/(.+) Found virus (.*)\'},
   sophos => {
     Output => '>>> Virus',
     String => '>>> Virus \'(.*)\''},
   sophossavi => {
     Output => 'INFECTED::',
     String => 'INFECTED:: (.*)::'},
   inoculan => {
     Output => 'was infected by virus',
     String => 'was infected by virus \[(.*)\]'},
   clamav => {
     Output => 'FOUND',
     String => ':.* (.*) FOUND'},
   command => {
     Output => 'Infection:',
     String => 'Infection: (.*)'},
   "f-prot" => {
     Output => 'Infection:',
     String => 'Infection: (.*)'},
   mcafee => {
     Output => 'Found the',


James Gray wrote:
> On Wed, 2 Mar 2005 03:02 pm, Peter Russell wrote:
>
>>IN the past i remember some one haviong a cool script/command that would
>>show you stats on infections?
>>
>>I ahve a mailscanner machine on a PC that is suffering badly with heaps
>>of viruses and i would love to know how to find out how many or what
>>type of infections etc?
>
>
> Are you thinking of the "vnames.pl" script which produces a bullet-list of
> viruses caught and a tally for each infection?
>
> http://web.csma.biz/apps/vnames.shtml
>
> HTH,
>
> James
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list