Larry Rosenman wrote:
> Any suggestions on my questions about McAfee's UVSCAN (3 different
> possible lines of output)?
Sorry, my Inbox is a blackhole sometimes :)
This was what amavisd-milter was doing:
$loutput =~ s/Found: (.+) NOT a/Found the $1/g;
$loutput =~ s/Found the (.+) trojan/Found the $1 virus/g;
$loutput =~ s/Found virus or variant (.+) /Found the $1 virus/g;
@virusname = ($loutput =~ /Found the (.+) virus/g);
@virusname = (undef) if !@virusname; # just in case: make list
With exiscan, just use this:
exiscan_av_scanner_regexp_trigger = Found
exiscan_av_scanner_regexp_description = Found[: ] (.+)$
That will even put McAffees metainformation in the virus name :)
/tom
--
Tom Kistner <tom@???>
ICQ 1501527 dcanthrax@efnet
http://duncanthrax.net
