VBA32 as new scanner

Julian Field MailScanner at ecs.soton.ac.uk
Thu May 1 18:38:49 IST 2008


I have written support for it, and this will be in the next release.
Fortunately it was fairly straightforward to analyse.

Hugo van der Kooij wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Jules,
>
> Could you add VBA32 as a virus scanner?
>
> You can download the latest commandline version from
> ftp://anti-virus.by/pub/
>
> At the moment that would be vbacl-linux-3.12.6.1-20080215.tar.gz
>
> I must admit I have not yet tried to decode the output from the
> commandline. But I use the following bit of perl to read the log file:
>
> while ($line = <FILE>) {
> ~   if ($line =~ / : (infected|is suspected of) /) {
> ~      chomp($line);
> ~      $line =~ s/^\/var\/virus\/2do\///;
> ~      @fields = split(/ : /,$line);
> ~      @fields[0] =~ s/:.*//;
> ~   }
> }
>
> The commandline scanner is free to use. That is free as in free wine.
> (No point in telling Jules it's free beer ;-)
>
> Regards,
> Hugo.
>
> - --
> hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
> PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
>
>     A: Yes.
>     >Q: Are you sure?
>     >>A: Because it reverses the logical flow of conversation.
>     >>>Q: Why is top posting frowned upon?
>
> Bored? Click on http://spamornot.org/ and rate those images.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
>
> iD8DBQFIGac9BvzDRVjxmYERAhmHAJ9rF9z+R/wrNEQcOjSTiTNujt8xggCfc2DY
> GU4irMBJBHuson+rGxUv/aQ=
> =4z0S
> -----END PGP SIGNATURE-----

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list