<HTML>
<HEAD>
<TITLE>MailWatch and McAfee</TITLE>
</HEAD>
<BODY>
<FONT FACE="Verdana">I just have to say, Great work!!<BR>
<BR>
But I need some help. How should the expression for McAfee look like?<BR>
<BR>
The log look like this:<BR>
Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages, 62658 bytes <BR>
Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting <BR>
Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning: Starting <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "/dev/shm/6710/h5L0FoD9006755/dr.scr" <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said " Found the W32/Ganda@MM virus !!!" <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr Found the W32/Ganda@MM virus !!! <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1 infections <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus hidden in a screensaver (dr.scr) <BR>
<BR>
And MailWatch show:<BR>
</FONT><FONT FACE="Lucida Grande"><B>Report: </B><FONT SIZE="1">/h5L0FoD9006755/dr.scr Found the W32/Ganda@MM virus !!! Windows Screensavers are often used to hide viruses (dr.scr) <BR>
</FONT></FONT><FONT FACE="Verdana"><BR>
//Daniel Zajd<BR>
Mailsystem Sweden<BR>
<BR>
</FONT>
</BODY>
</HTML>