[Mimedefang] uvscan - detecting virus name

Jeremy McCarty jeremy at nd.edu
Sun Jun 8 11:01:59 EDT 2003


The parsing of uvscan output doesn't account for definitions included via
extra.dat.  That output includes an additional '(ED)' in both 4.1.60 and
4.2.40 engines, like:

Found the W32/Bugbear.b.dam (ED) virus !!!

You might might to include a change like this in the code to account for this:

<           if ($CurrentVirusScannerMessage =~ m/^\s+Found the (\S+) virus/);
---
>           if ($CurrentVirusScannerMessage =~ m/^\s+Found the (\S+) (\S+ )?virus/);


Thanks,
Jeremy

--
Office of Information Technologies
 - Infrastructure Services
University of Notre Dame
jeremy at nd.edu



More information about the MIMEDefang mailing list