<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Paul - <br>
<br>
Thanks for the update. I run AVG with clamd - I'll have to test
alone as well.<br>
<br>
Kind regards,<br>
<br>
mph<br>
<br>
<div class="moz-cite-prefix">On 9/21/2014 2:07 PM, Paul Welsh wrote:<br>
</div>
<blockquote
cite="mid:CAA510g5pzL_N52M-6spDrPy7JUcO4bd3zLX=TzNHTb9MenMU2g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi Michael</div>
<div><br>
</div>
<div>Thanks for the info about AVG you provided back in May.</div>
<div><br>
</div>
<div>I didn't get any luck with this. When I run avg with
f-prot6 or clamd it appears to work. I get this in maillog:</div>
<div>Clamd::INFECTED::Eicar-Test-Signature<br>
</div>
<div>Avg: Virus identified EICAR_Test; deleted in msg-9254-1.txt<br>
</div>
<div><br>
</div>
<div>and I get this in the attachment-warning.txt in the
received message:</div>
<div>
<div>Clamd: msg-9254-1.txt was infected: Eicar-Test-Signature</div>
<div>Avg: Found virus deleted in file msg-9254-1.txt</div>
</div>
<div><br>
</div>
<div>So looks promising.</div>
<div><br>
</div>
<div>However, if I use AVG on its own I see this in the log:</div>
<div>Avg: Virus identified EICAR_Test; deleted in
msg-12519-1.txt<br>
</div>
<div>Virus Scanning: Avg found 1 infections<br>
</div>
<div>Virus Scanning: Found 1 viruses<br>
</div>
<div>Delivery of nonspam<br>
</div>
<div><br>
</div>
<div>The message is delivered intact.</div>
<div><br>
</div>
<div>To test I'm including the eicar text in the body of a
message. Using MailScanner 4.84.5.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 23 May 2014 12:00, <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:mailscanner-request@lists.mailscanner.info"
target="_blank">mailscanner-request@lists.mailscanner.info</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">----------
Forwarded message ----------<br>
From: Michael Huntley <<a moz-do-not-send="true"
href="mailto:michael@huntley.net">michael@huntley.net</a>><br>
To: MailScanner discussion <<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
Cc: <br>
Date: Thu, 22 May 2014 23:00:28 -0700<br>
Subject: Re: Antivirus performance, AVG<br>
<div bgcolor="#FFFFFF" text="#000000"> I got AVG to
work.<br>
<br>
I changed this line in virus.scanners.conf:<br>
avg
/usr/lib/MailScanner/avg-wrapper /opt/avg/av<br>
<br>
Save a copy just-in-case someone blows the dust off
this project and releases an update......<br>
<br>
Then I edited the wrapper:<br>
/usr/lib/MailScanner/avg-wrapper:<br>
<br>
#Add the t option to delete infected object.
MailScanner doesn't remove it otherwise...<br>
#probably a code issue. Don't care, throw the beastie
away.<br>
ScanOptions="-at"<br>
PackageDir=$1<br>
shift<br>
Prog=avgscan<br>
<br>
if [ "x$1" = "x-IsItInstalled" ]; then<br>
[ -x ${PackageDir}/bin/$Prog ] && exit 0<br>
exit 1<br>
fi<br>
<br>
# Force output into English<br>
LANG=EN<br>
export LANG<br>
# update AVGs library reference<br>
<br>
#Needed For Proper Use Of New AVG<br>
export
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/avg/av/lib<br>
export AVGINSTDIR=/opt/avg/av<br>
export HOME=/opt/avg/av<br>
<br>
exec $PackageDir/bin/$Prog $ScanOptions "$@"
2>&1<br>
exit 1<br>
<br>
...<br>
<br>
Save a backup of the wrapper in case (highly UNLIKELY
at this time) MailScanner has an update. HA!<br>
<br>
Cheers!<br>
<br>
mph</div>
</blockquote>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>