VBA32 as new scanner
Julian Field
MailScanner at ecs.soton.ac.uk
Thu May 1 18:38:49 IST 2008
I have written support for it, and this will be in the next release.
Fortunately it was fairly straightforward to analyse.
Hugo van der Kooij wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Jules,
>
> Could you add VBA32 as a virus scanner?
>
> You can download the latest commandline version from
> ftp://anti-virus.by/pub/
>
> At the moment that would be vbacl-linux-3.12.6.1-20080215.tar.gz
>
> I must admit I have not yet tried to decode the output from the
> commandline. But I use the following bit of perl to read the log file:
>
> while ($line = <FILE>) {
> ~ if ($line =~ / : (infected|is suspected of) /) {
> ~ chomp($line);
> ~ $line =~ s/^\/var\/virus\/2do\///;
> ~ @fields = split(/ : /,$line);
> ~ @fields[0] =~ s/:.*//;
> ~ }
> }
>
> The commandline scanner is free to use. That is free as in free wine.
> (No point in telling Jules it's free beer ;-)
>
> Regards,
> Hugo.
>
> - --
> hvdkooij at vanderkooij.org http://hugo.vanderkooij.org/
> PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
>
> A: Yes.
> >Q: Are you sure?
> >>A: Because it reverses the logical flow of conversation.
> >>>Q: Why is top posting frowned upon?
>
> Bored? Click on http://spamornot.org/ and rate those images.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
>
> iD8DBQFIGac9BvzDRVjxmYERAhmHAJ9rF9z+R/wrNEQcOjSTiTNujt8xggCfc2DY
> GU4irMBJBHuson+rGxUv/aQ=
> =4z0S
> -----END PGP SIGNATURE-----
Jules
--
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list