Re: [AMaViS-user] Virusname contains space

This is a discussion on Re: [AMaViS-user] Virusname contains space within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Andreas, > test.zip/INSTALL.EXE Found trojan or variant New Malware.ab !!! > Found the W32/Netsky.p.eml!...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 03-15-2006
Mark Martinec
 
Posts: n/a
Default Re: [AMaViS-user] Virusname contains space

Andreas,

> test.zip/INSTALL.EXE Found trojan or variant New Malware.ab !!!
> Found the W32/Netsky.p.eml!exe virus !!!
> Found the W32/Netsky.n@MM virus !!!


Thanks for samples.

Here is a better regexp to be used in the uvscan @av_scanners,
which should cope with spaces in virus name:

qr/(?x) Found (?:
\ the\ (.+)\ (?:virus|trojan) |
\ (?:virus|trojan)\ or\ variant\ (.+?)\s*! |
:\ (.+)\ NOT\ a\ virus)/,


Mark


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=...720&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 11:25 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0