Tommi Maekitalo wrote:
> av_scanner = cmdline:\
> /usr/bin/antivir --allfiles -noboot -nombr -rs -s -z %s : \
> ALERT:: : \[.*\]
> ALERT: [Worm/Sober.G worm] ./stuff_1412.zip <<< Contains signature of the worm
> Worm/Sober.G
You forgot the brackets. Try
av_scanner = cmdline:\
/usr/bin/antivir --allfiles -noboot -nombr -rs -s -z %s : \
ALERT:: : \[(.*)\]
/tom