OT - Clamav question

Scott Silva ssilva at SGVWATER.COM
Thu Mar 3 19:36:38 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Pete Russell wrote:
> I would like to try and get it to handle Bitdefender. only need to
> modify ONE (or maybe 2) line of code from what i can see.
>
> The output and string values for Bitdefender. ANy idea whgat they might be?
>
> # Scanner Strings
> my %Scanners = (
>   bitdefender => {
>     Output => '/(.+) Found virus (.*)',
>     String => '/(.+) Found virus (.*)\'},
>   sophos => {
>     Output => '>>> Virus',
>     String => '>>> Virus \'(.*)\''},
>   sophossavi => {
>     Output => 'INFECTED::',
>     String => 'INFECTED:: (.*)::'},
>   inoculan => {
>     Output => 'was infected by virus',
>     String => 'was infected by virus \[(.*)\]'},
>   clamav => {
>     Output => 'FOUND',
>     String => ':.* (.*) FOUND'},
>   command => {
>     Output => 'Infection:',
>     String => 'Infection: (.*)'},
>   "f-prot" => {
>     Output => 'Infection:',
>     String => 'Infection: (.*)'},
>   mcafee => {
>     Output => 'Found the',

Maybe start with this;
    bitdefender=> {
    Output => '\/.*infected:',
    String => '\/.*infected: (.*)' },

Might take some playing, but this is out of Vispan. I had to give credit
where credit is due!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list