<div dir="ltr"><div>Hi Michael</div><div><br></div><div>Thanks for the info about AVG you provided back in May.</div><div><br></div><div>I didn't get any luck with this. When I run avg with f-prot6 or clamd it appears to work. I get this in maillog:</div><div>Clamd::INFECTED::Eicar-Test-Signature<br></div><div>Avg: Virus identified EICAR_Test; deleted in msg-9254-1.txt<br></div><div><br></div><div>and I get this in the attachment-warning.txt in the received message:</div><div><div>Clamd: msg-9254-1.txt was infected: Eicar-Test-Signature</div><div>Avg: Found virus deleted in file msg-9254-1.txt</div></div><div><br></div><div>So looks promising.</div><div><br></div><div>However, if I use AVG on its own I see this in the log:</div><div>Avg: Virus identified EICAR_Test; deleted in msg-12519-1.txt<br></div><div>Virus Scanning: Avg found 1 infections<br></div><div>Virus Scanning: Found 1 viruses<br></div><div>Delivery of nonspam<br></div><div><br></div><div>The message is delivered intact.</div><div><br></div><div>To test I'm including the eicar text in the body of a message. Using MailScanner 4.84.5.</div><div><br></div><div><br></div><div><br></div><div><br></div><div><div class="gmail_extra"><br><div class="gmail_quote">On 23 May 2014 12:00, <span dir="ltr"><<a href="mailto:mailscanner-request@lists.mailscanner.info" target="_blank">mailscanner-request@lists.mailscanner.info</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">---------- Forwarded message ----------<br>From: Michael Huntley <<a href="mailto:michael@huntley.net">michael@huntley.net</a>><br>To: MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>Cc: <br>Date: Thu, 22 May 2014 23:00:28 -0700<br>Subject: Re: Antivirus performance, AVG<br>
<div bgcolor="#FFFFFF" text="#000000">
I got AVG to work.<br>
<br>
I changed this line in virus.scanners.conf:<br>
avg /usr/lib/MailScanner/avg-wrapper /opt/avg/av<br>
<br>
Save a copy just-in-case someone blows the dust off this project and
releases an update......<br>
<br>
Then I edited the wrapper:<br>
/usr/lib/MailScanner/avg-wrapper:<br>
<br>
#Add the t option to delete infected object. MailScanner doesn't
remove it otherwise...<br>
#probably a code issue. Don't care, throw the beastie away.<br>
ScanOptions="-at"<br>
PackageDir=$1<br>
shift<br>
Prog=avgscan<br>
<br>
if [ "x$1" = "x-IsItInstalled" ]; then<br>
[ -x ${PackageDir}/bin/$Prog ] && exit 0<br>
exit 1<br>
fi<br>
<br>
# Force output into English<br>
LANG=EN<br>
export LANG<br>
# update AVGs library reference<br>
<br>
#Needed For Proper Use Of New AVG<br>
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/avg/av/lib<br>
export AVGINSTDIR=/opt/avg/av<br>
export HOME=/opt/avg/av<br>
<br>
exec $PackageDir/bin/$Prog $ScanOptions "$@" 2>&1<br>
exit 1<br>
<br>
...<br>
<br>
Save a backup of the wrapper in case (highly UNLIKELY at this time)
MailScanner has an update. HA!<br>
<br>
Cheers!<br>
<br>
mph</div></blockquote></div></div></div></div>