[Mimedefang] Virus:HBEDV and antivir 3.x avscan

[Jason Bertoch]

> Am Freitag, den 22.01.2010, 01:15 +0100 schrieb Marcus:
> 
> I've set a symlink from avscan to antivir and changed
> "run_virus_scanner" in sub message_contains_virus_hbedv
> in /usr/bin/mimedefang.pl to
> 
> run_virus_scanner($Features{'Virus:HBEDV'} . " --batch
> --alert-action=none --allfiles -z -rs ./Work 2>&1", "!Virus!|>>>|VIRUS:|
> FUND:");
> 
> This seems to work fine, the eicar test virus is found, but the name of
> the virus is not set in "X-Virus-Status: Yes, name=unknown-HBEDV-virus"
> using
> 
> action_add_header('X-Virus-Status', "Yes, name=$VirusName");
> 
> And I'm looking for another way to modify the line "run_virus_scanner"
> instead of writing it directly to /usr/bin/mimedefang.pl. All changes
> here might be overwritten with a next package upgrade/fix.
> 

Years ago I ran a supported antivirus program that changed the way it output
virus names.  I found the only way to fix it was to modify mimedefang.pl, so I
submitted a patch.  David promptly improved my patch and added it to the next
release.  Since H+BEDV is supported, maybe you're now in the same boat and
should submit a patch?

Jason A. Bertoch
Network Administrator
jason at electronet.net
Electronet Broadband Communications
3411 Capital Medical Blvd.
Tallahassee, FL 32308
(V) 850.222.0229 (F) 850.222.8771