<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>McAfee VirusScan 6.00.0 for Unix is now out</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16915" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2>OK, here's the difference in output between new and old
uvscan.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2>New uvscan V6.00:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff
size=2>------------------------------------------------------------------------------------------------</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2># uvscan eicar.com<BR>McAfee VirusScan Command Line for
Linux32 Version: 6.0.0.309<BR>Copyright (C) 2009 McAfee, Inc.<BR>(408) 988-3832
LICENSED COPY - November 05 2009</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2>AV Engine version: 5400.1158 for Linux32.<BR>Dat set
version: 5793 created Nov 5 2009<BR>Scanning for 582800 viruses, trojans and
variants.</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2>/usr/src/eicar.com ... Found: EICAR test file NOT a
virus.</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=337453922-05112009><FONT face=Arial
color=#0000ff size=2><BR>Time:
00:00.00<BR>------------------------------------------------------------------------------------------------</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=337453922-05112009></SPAN><FONT face=Arial><FONT
color=#0000ff><FONT size=2>O<SPAN
class=337453922-05112009>ld:</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009></SPAN></FONT></FONT></FONT><SPAN
class=337453922-05112009></SPAN><FONT face=Arial><FONT color=#0000ff><FONT
size=2>-<SPAN
class=337453922-05112009>-----------------------------------------------------------------------------------------------</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009></SPAN></FONT></FONT></FONT><FONT face=Arial><FONT
color=#0000ff><FONT size=2># uvscan
eicar.com<BR>/usr/src/eicar.com<BR>
Found: EICAR test file NOT a virus.<BR><SPAN
class=337453922-05112009></SPAN>-<SPAN
class=337453922-05112009>-----------------------------------------------------------------------------------------------</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>So SweepViruses.pm will need amending to parse the
output...</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>mcafee-autoupdate for the new DAT files needs a few
changes. Here's a .diff (tested,
working)</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>------------------------------------------------------------------------------------------------</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>---
mcafee-autoupdate.old 2009-11-05
20:56:43.000000000 +0000<BR>+++ mcafee-autoupdate 2009-11-05
21:44:26.000000000 +0000<BR>@@ -21,7 +21,7 @@<BR> #
defaults<BR> OPTS="-d"<BR> PREFIX=/usr/local/uvscan<BR>-FTPDIR=http://download.nai.com/products/datfiles/4.x/nai<BR>+FTPDIR=http://download.nai.com/products/commonupdater<BR> RETRIES=1<BR> INTERVAL=300</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>@@ -100,7 +100,7 @@</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009> # where this script finds
things<BR> DATDIR=$PREFIX/datfiles<BR>-DATFILES="clean.dat extra.dat
internet.dat names.dat scan.dat"<BR>+DATFILES="avvclean.dat extra.dat
avvnames.dat avvscan.dat
runtime.dat"<BR> LINKNAME=current<BR> LINKREL=datfiles/$LINKNAME</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=337453922-05112009>@@ -248,14 +248,14 @@<BR> while
:<BR> do<BR> # fetch and
extract dat files<BR>-
TARFILE=dat-$VERSION.tar<BR>+
TARFILE=avvdat-$VERSION.zip<BR>
run mkdir $VERSION<BR> run cd
$VERSION<BR> run chmod 700
.<BR> if ! run wget --tries=$try
--waitretry=$INTERVAL --passive-ftp
--progre
ss=dot:mega $FTPDIR/$TARFILE<BR>
then retry<BR>
fi<BR>- run tar xvf
$TARFILE<BR>+ run unzip
$TARFILE<BR> run chmod 644
*<BR> run chmod 755
.<BR>-------------------------------------------------------------------------------------------------------</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT><FONT face=Arial color=#0000ff
size=2></FONT><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=337453922-05112009><FONT face=Arial color=#0000ff size=2>At
this point I'm going to hand over to someone who knows perl and bash scripting
better than I do.</FONT></SPAN></DIV>
<DIV><SPAN class=337453922-05112009><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=337453922-05112009><FONT face=Arial color=#0000ff
size=2>Cheers,</FONT></SPAN></DIV>
<DIV><SPAN class=337453922-05112009><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=337453922-05112009><FONT face=Arial color=#0000ff
size=2>Phil</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT><FONT face=Arial color=#0000ff
size=2></FONT><BR></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Randal,
Phil<BR><B>Sent:</B> 05 November 2009 13:45<BR><B>To:</B> MailScanner
discussion<BR><B>Subject:</B> McAfee VirusScan 6.00.0 for Unix is now
out<BR></FONT><BR></DIV>
<DIV></DIV><!-- Converted from text/rtf format -->
<P><FONT face=Arial size=2>Hi folks,</FONT> </P>
<P><FONT face=Arial size=2>McAfee have released version 6.00.0 of their Unix
commandline virus scanners (available from the corporate downl;oad portal with
your McAfee grant number).</FONT></P>
<P><FONT face=Arial size=2>This supports the avvdat pattern formats used by
VirusScan 8.5 and 8.7 on windows, and will need an update to the McAfee
autoupdate script in MailScanner.</FONT></P>
<P><FONT face=Arial size=2>Users will need to upgrade by the end of March 2010
when the old DAT formats used by earlier versions of uvscan will no longer be
provided by McAfee.</FONT></P>
<P><FONT face=Arial size=2>If I get a chance next week, I'll have a look at the
mcafee-autoupdate script to see what changes are needed.</FONT> </P>
<P><FONT face=Arial size=2>Cheers,</FONT> </P>
<P><FONT face=Arial size=2>Phil</FONT> </P>
<P><FONT face=Arial size=2>--</FONT> <BR><FONT face=Arial size=2>Phil Randal |
Networks Engineer</FONT> <BR><FONT face=Arial color=#400040 size=2>NHS
Herefordshire & Herefordshire Council |</FONT> <FONT face=Arial
size=2>Deputy Chief Executive's Office | I.C.T. Services Division</FONT>
<BR><FONT face=Arial size=2>Thorn Office Centre, Rotherwas, Hereford, HR2
6JT</FONT> <BR><FONT face=Arial size=2>Tel: 01432 260160</FONT> <BR><FONT
face=Arial size=2>email: prandal@herefordshire.gov.uk</FONT> </P>
<P><FONT face=Arial size=2>Any opinion expressed in this e-mail or any attached
files are those of the individual and not necessarily those of Herefordshire
Council.</FONT></P>
<P><FONT face=Arial size=2>This e-mail and any attached files are confidential
and intended solely for the use of the addressee. This communication may contain
material protected by law from being passed on. If you are not the intended
recipient and have received this e-mail in error, you are advised that any use,
dissemination, forwarding, printing or copying of this e-mail is strictly
prohibited. If you have received this e-mail in error please contact the sender
immediately and destroy all copies of it.</FONT></P>
<DIV> </DIV>Any opinion expressed in this e-mail or any attached files are
those of the individual and not necessarily those of Herefordshire
Council.<BR>You should be aware that Herefordshire Council monitors its email
service.<BR>This e-mail and any attached files are confidential and intended
solely for the use of the addressee. This communication may contain material
protected by law from being passed on. If you are not the intended recipient and
have received this e-mail in error, you are advised that any use, dissemination,
forwarding, printing or copying of this e-mail is strictly prohibited. If you
have received this e-mail in error please contact the sender immediately and
destroy all copies of it. <DIV> </DIV>Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council.<br>You should be aware that Herefordshire Council monitors its email service.<br>This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.</BODY></HTML>