[Mimedefang] Re: Request for $VirusScannerMessages from all virus scanner types

Paulo Rodrigues prodrigues at vianetworks.pt
Thu Sep 26 12:58:01 EDT 2002


Hello:

this is OpenAntiVirus' message:

A known virus was discovered and deleted.  Virus-scanner messages follow:
FOUND: Eicar-Test-Signature

and this is File::Scan's message:

A known virus was discovered and deleted.  Virus-scanner messages follow:
File::Scan found the 'EICAR-Test-File' virus.

Hope that helps,
Paulo

John Kirkland wrote:
> I need messages from the following virus scanners:
> 
> 
>>Virus:AVP
>>Virus:FPROT
>>Virus:FSAV
>>Virus:NVCC
>>Virus:OpenAV
>>Virus:RAV
>>Virus:SOPHIE
>>Virus:TREND
> 
> 
> Do any of you use these virus scanners?  I need a sample of the output so
> I can parse out the name of the virus from the global var
> $VirusScannerMessages.
> 
> I have messages from CLAMAV, FileScan, NAI, and H+BEDV thanks to those
> that sent them to me.
> 
> Many Thanks,
> John Kirkland
> 
> On Mon, 23 Sep 2002, John Kirkland wrote:
> 
> 
>>All,
>>
>>The graphdefang software that I've been working on parses the content of
>>the $VirusScannerMessages global variable to determine the $VirusName of a
>>given virus.  My implementation is currently McAfee uvscan specific.
>>
>>For those that can help out, can you provide me the text from your virus
>>scanner that is in the $VirusScannerMessages global variable.  If you
>>quarantine your virus messages, you can find the text of this variable in
>>the MSG.1 file in the quarantine directories.
>>
>>I need text for the following virus scanners (I have Virus:NAI):
>>
>>Virus:AVP
>>Virus:CLAMAV
>>Virus:FPROT
>>Virus:FSAV
>>Virus:FileScan
>>Virus:HBEDV
>>Virus:NVCC
>>Virus:OpenAV
>>Virus:RAV
>>Virus:SOPHIE
>>Virus:SOPHOS
>>Virus:TREND
>>
>>Thank You,
>>John Kirkland
>>
>>
> 
> 
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> 
> .
> 


-- 
Paulo Rodrigues
prodrigues at vianetworks.pt
VIA NET.WORKS Portugal




More information about the MIMEDefang mailing list