[Mimedefang] WORM_MYDOOM.A & Trend Interscan VirusWall

number6 at freesurf.fr number6 at freesurf.fr
Tue Feb 3 14:51:16 EST 2004


Hi, 

Trend vscan users HEADS-UP. 
I've noticed some messages infected by WORM_MYDOOM.A 
not being detected by Trend Interscan VirusWall's vscan. 
vscan is a bit strange and does not always scan within 
zipfiles with only "-a" switch. Adding -za with -a 
seems to solve the problem. 

So in MIMEDefang 2.39 (or below) change the mimedefang.pl code :
replace
run_virus_scanner($Features{'Virus:TREND'} . " -a ./Work/* 2>&1", "Found");
with
run_virus_scanner($Features{'Virus:TREND'} . " -za -a ./Work/* 2>&1",
"Found");

Vscan switches meaning is not clear : 
        -a : scan all files.
        -za : scan all files in compressed archives.

David, If nobody experiences problems can you change the code for
MIMEDefang
2.40-BETA2 or final ? 

Regards, 

N°6

PS : I can provide an example of zipfile not detected without
-za if needed.

PS : There are many vscan options. People having good support contract
with Trend should try to get more details about these and also request
complete exit codes list as there is nearly no documentation. 



More information about the MIMEDefang mailing list