Hi!<br><br>Works like charm, tested it with single and multiple scanners (together with clamd). Just fyi, there are still some parsing issues if the file is zipped, but I suppose that does not matter. <br><br>Thanks very much<br>
regards<br>Eliott<br><br>--------<br>Feb 12 15:46:44 localhost MailScanner[12357]: New Batch: Scanning 1 messages, 1541 bytes<br>Feb 12 15:46:44 localhost MailScanner[12357]: Filename Checks: Windows/DOS Executable (o1CEkcZm012430 <a href="http://eicar.com">eicar.com</a>)<br>
Feb 12 15:46:44 localhost MailScanner[12357]: Other Checks: Found 1 problems<br>Feb 12 15:46:44 localhost MailScanner[12357]: Virus and Content Scanning: Starting<br>Feb 12 15:46:45 localhost MailScanner[12357]: Avg: Virus identified EICAR_Test in eicar_com.zip-><a href="http://eicar.com">eicar.com</a><br>
Feb 12 15:46:45 localhost MailScanner[12357]: Avg: Virus identified EICAR_Test in eicar_com.zip<br>Feb 12 15:46:46 localhost MailScanner[12357]: Avg: Virus identified EICAR_Test in <a href="http://zeicar.com">zeicar.com</a><br>
Feb 12 15:46:46 localhost MailScanner[12357]: Virus Scanning: Avg found 3 infections<br>--------<br><br>Many thanks<br>Eliott<br><br><div class="gmail_quote">On Fri, Feb 12, 2010 at 2:52 PM, Julian Field <span dir="ltr"><<a href="mailto:MailScanner@ecs.soton.ac.uk">MailScanner@ecs.soton.ac.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I have just released version 4.80.1 beta for you, which contains the AVG8 support you wanted.<br>
<br>
Best regards,<br>
Jules.<div><div></div><div class="h5"><br>
<br>
On 12/02/2010 12:42, Julian Field wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I'll put out a new beta including support for AVG8 after I've had some lunch.<br>
It's all working.<br>
:-)<br>
<br>
Jules.<br>
<br>
On 12/02/2010 11:50, Eliott wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi!<br>
<br>
Thanks, this is the command to execute: avgscan -arch . (by default it does not search archives)<br>
The output is attached, there are strange control characters in the fiile, this might be realted to out problem.<br>
Avg itself can be downloaded from: <a href="http://free.avg.com/us-en/download?prd=afl" target="_blank">http://free.avg.com/us-en/download?prd=afl</a><br>
The free edition is free for personal use.<br>
Regards<br>
Eliott<br>
<br>
<br>
On Thu, Feb 11, 2010 at 5:13 PM, Julian Field <<a href="mailto:MailScanner@ecs.soton.ac.uk" target="_blank">MailScanner@ecs.soton.ac.uk</a> <mailto:<a href="mailto:MailScanner@ecs.soton.ac.uk" target="_blank">MailScanner@ecs.soton.ac.uk</a>>> wrote:<br>
<br>
Can you do a scan something like this (where "avg8" is whatever<br>
your virus scanner command is called):<br>
1. Put an eicar_com.zip containing <a href="http://eicar.com" target="_blank">eicar.com</a> <<a href="http://eicar.com" target="_blank">http://eicar.com</a>><br>
into /tmp/eicar_com.zip<br>
2. Do these 2 commands:<br>
cd /tmp<br>
avg8 . > /root/avg8.output<br>
3. Mail me a copy of the avg8.output file.<br>
<br>
Ideally, if you could put the entire avg8 package somewhere I can<br>
download it (don't publish the URL, just send it to me off-list)<br>
and send me a valid licence for it as well, I will write the<br>
support you need.<br>
<br>
Don't worry about your licence, it will *only* be used for my<br>
development purposes, I won't let it leak out anywhere or use it<br>
for anything else.<br>
<br>
Jules.<br>
<br>
<br>
On 11/02/2010 15:58, Eliott wrote:<br>
<br>
Hi!<br>
<br>
Can anybody help me further on this? I have the same setup<br>
with Linux 2.6.9-78.0.8.ELsmp , Perl version 5.008005 (5.8.5)<br>
and MailScanner version 4.70.7 with avg7 working, so I<br>
suppose it must be an avg8 issue.<br>
this is what I get when running avgscan standalone:<br>
AVG command line Anti-Virus scanner<br>
Copyright (c) 2009 AVG Technologies CZ<br>
<br>
Virus database version: 271.1.1/2677<br>
Virus database release date: Tue, 09 Feb 2010 08:35:00 +01:00<br>
<br>
/root/eicar_com.zip:/<a href="http://eicar.com" target="_blank">eicar.com</a> <<a href="http://eicar.com" target="_blank">http://eicar.com</a>><br>
<<a href="http://eicar.com" target="_blank">http://eicar.com</a>> Virus identified EICAR_Test<br>
<br>
/root/eicar_com.zip Virus identified EICAR_Test<br>
<br>
Files scanned : 2(1)<br>
Infections found : 2(1)<br>
<br>
thanks in advance<br>
eliott<br>
<br>
<br>
<br>
On Fri, Jan 22, 2010 at 1:48 PM, Eliott <<a href="mailto:eliott100@gmail.com" target="_blank">eliott100@gmail.com</a><br>
<mailto:<a href="mailto:eliott100@gmail.com" target="_blank">eliott100@gmail.com</a>> <mailto:<a href="mailto:eliott100@gmail.com" target="_blank">eliott100@gmail.com</a><br>
<mailto:<a href="mailto:eliott100@gmail.com" target="_blank">eliott100@gmail.com</a>>>> wrote:<br>
<br>
Hi!<br>
<br>
we are about to migrate an old imlementation while<br>
upgrading all<br>
the components and came across a strange problem.<br>
With MailScanner 4.78.17 and avg 8.5.288 we see the<br>
following log<br>
entries:<br>
--------------<br>
Jan 18 15:47:23 localhost MailScanner[4725]: New Batch:<br>
Scanning 1<br>
messages, 1338 bytes<br>
Jan 18 15:47:23 localhost MailScanner[4725]: Virus and Content<br>
Scanning: Starting<br>
Jan 18 15:47:23 localhost MailScanner[4725]: Avg: Virus<br>
identified<br>
EICAR_Test in eicar.txt<br>
Jan 18 15:47:23 localhost MailScanner[4725]: Virus<br>
Scanning: Avg<br>
found 1 infections<br>
Jan 18 15:47:23 localhost MailScanner[4725]: Infected message<br>
ESC[2Ko0IElNL7004734 came from<br>
Jan 18 15:47:23 localhost MailScanner[4725]: Virus<br>
Scanning: Found<br>
1 viruses<br>
Jan 18 15:47:24 localhost MailScanner[4725]: Uninfected:<br>
Delivered<br>
1 messages<br>
Jan 18 15:47:24 localhost MailScanner[4725]: Deleted 1 messages<br>
from processing-database<br>
smtp2225, pri=120812, relay=[10.0.20.10] [10.0.20.10],<br>
dsn=2.0.0,<br>
stat=Sent (Message accepted for delivery)<br>
---------------<br>
I have checked SweepVisuses.pm, but there the output seems<br>
to be<br>
parsed well. Is this a configuration issue or a bug?<br>
<br>
Thanks and regards<br>
Eliott<br>
<br>
<br>
<br>
<br>
Jules<br>
<br>
-- Julian Field MEng CITP CEng<br>
<a href="http://www.MailScanner.info" target="_blank">www.MailScanner.info</a> <<a href="http://www.MailScanner.info" target="_blank">http://www.MailScanner.info</a>><br>
Buy the MailScanner book at <a href="http://www.MailScanner.info/store" target="_blank">www.MailScanner.info/store</a><br>
<<a href="http://www.MailScanner.info/store" target="_blank">http://www.MailScanner.info/store</a>><br>
<br>
Need help customising MailScanner?<br>
Contact me!<br>
Need help fixing or optimising your systems?<br>
Contact me!<br>
Need help getting you started solving new requirements from your boss?<br>
Contact me!<br>
<br>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<br>
Follow me at <a href="http://twitter.com/JulesFM" target="_blank">twitter.com/JulesFM</a> <<a href="http://twitter.com/JulesFM" target="_blank">http://twitter.com/JulesFM</a>> and<br>
<a href="http://twitter.com/MailScanner" target="_blank">twitter.com/MailScanner</a> <<a href="http://twitter.com/MailScanner" target="_blank">http://twitter.com/MailScanner</a>><br>
<br>
<br>
-- This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
-- MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<mailto:<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a>><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br>
<br>
</blockquote>
<br>
Jules<br>
<br>
</blockquote>
<br>
Jules<br>
<br>
-- <br>
Julian Field MEng CITP CEng<br>
<a href="http://www.MailScanner.info" target="_blank">www.MailScanner.info</a><br>
Buy the MailScanner book at <a href="http://www.MailScanner.info/store" target="_blank">www.MailScanner.info/store</a><br>
<br>
Need help customising MailScanner?<br>
Contact me!<br>
Need help fixing or optimising your systems?<br>
Contact me!<br>
Need help getting you started solving new requirements from your boss?<br>
Contact me!<br>
<br>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<br>
Follow me at <a href="http://twitter.com/JulesFM" target="_blank">twitter.com/JulesFM</a> and <a href="http://twitter.com/MailScanner" target="_blank">twitter.com/MailScanner</a><br>
<br>
<br>
-- <br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</div></div></blockquote></div><br>