AnitViren Software PlugIn?

[Gast]

Hi Leutz,
anscheint hat hier noch keiner nach einem AntiViren Plugin gefragt???

Daher meine Frage macht es Sinn solch ein PlugIn anzubieten?
Um beim Empfang der eMails in den Spamihilator nach Viren zu suchen

ich selbst verwende http://www.antivir.de
weiß aber selbst noch nicht wie der Commando heißen muß um gezielt einzelne Dateien (Ordner) angeben zu können

[KanuUli]

naja so ein plugin ist meist sinnlos, da die meisten heutigen antiviren programme einen mail-proxy besitzen. oder alle gerade verarbeiteten dateien prüfen.

[RossiRat]

Der Antivir Guard überwacht die Dateien die gelesen und geschreiben werden und wird dann auf jeden Fall den Virus entdecken, wenn das Mailprogramm die EML Datei auspackt.

Dazu muss der Antivir Guard natürlich mit installiert worden sein und in dessen Konfiguration auf der Reiterkarte "Suchen", Gruppe "Gerätemodus" darf nicht "Deaktiviert" ausgewählt sein.

[Stoneriver]

Hi Leutz,
Daher meine Frage macht es Sinn solch ein PlugIn anzubieten?

Hallo,
und das Hauptproblem dürfte darin liegen, das du das Plugin fast Täglich aktualisieren müsstest damit du immer die neuesten Signaturen mit drin hast.

tschau Frank

[KanuUli]

ich habe mir gerade seinen Beitrag noch mal durchgelesen... und jetzt verstehe ich es erst richtig.

er will etwas haben, das ein beliebiges AntiVirenProgramm aufruft und die zu prüfenden Mails übergibt und dann den Rückgabewert überprüft. Geht aus dem Rückgabewert hevor, das es sich um einen Virus handelt soll das plugin "Spam" melden, wenn nicht, vom nächsten Filterprüfen lassen.

so denke ich meinte er das...

is aber trotzdem nicht nötig. die Argumente stehen oben

[Mondkind]

Da musste das Plugin dann verschiedene Virenscanner unterstützen die öfter geändert werden etc.
Ich denke auch mal, dass es reichen sollte die Mail-Scan-Funktion des Virenscanners zu nutzen. Die meisten Scanner bieten sowas inzwischen an. Extra scannen lohnt sich da überhaupt nicht.

Gruss
Roman

[Bob Loeffler]

Hi all,

What are the most common command-line anti-virus software available right now? Do any of you use them on your computers?

I have written a Spamihilator filter that will use your command-line anti-virus software to find spam e-mails. (If a virus is found in an e-mail, the e-mail will be marked as spam.) The filter should NOT be used to run a daily virus scan. It should only be used to scan e-mails to see if they contain viruses. Also, if the filter finds a virus, the AV software shouldn't try to fix or delete the file because I have not tested the filter that way. Fixing or deleting or quarantining the virus will probably return a different exit code and the filter might not recognize it.

The anti-virus software MUST be able to do the following:

1) run from a command-line (DOS) window
2) run in "quiet" or "silent" mode (so its window doesn't appear and it doesn't prompt you for any input)
3) scan a single file (some will only scan a folder)
4) return an error code (e.g. 0=no virus found; 1=virus found; 2=possible virus found) so the filter will know if a virus was found

So far, I have only been able to test "F-Prot for DOS" (free version) and it works with the filter.

I tried to test an old version of AntiVir Personal Edition but it won't run correctly in "silent" mode because it requires me to press the Enter key when finished. The new version of it is called Avira but I have not tested it yet. Has anyone else used it?

Kaspersky has a command-line anti-virus version, but I haven't tried it yet. Does anyone have experience with it?

Does Norton, McAfee, BitDefender or Avast have a command-line version? If so, do any of you have experience with it?

The filter is not ready to give to anyone yet, but it will be soon. Then maybe some of the users here on the forum can test it with their anti-virus software.

Regards,

Bob

[Chactory]

Hello Bob Loeffler!

For me, there is no need to get an anti virus plugin, because my security software will check every mail. It works fine together with Apamihilator.

Regards, Chactory

[michel]

Apamihilator.

Nice!

Sincerely,
Michel Krämer

[Chactory]

Hallo Michel!

Sorry for that. Little slip of the pen.
By the way, "apam" is a "kind of rice flour cake" in Bali.
Far better than Frühstücksfleisch (spam), surely.

Gruß, Chactory

[Bob Loeffler]

For me, there is no need to get an anti virus plugin, because my security software will check every mail. It works fine together with Apamihilator.

Hi Chactory!

Yes, many people won't need this filter because their anti-virus software will already watch their incoming e-mails.

I think this filter will be good for people who don't have an anti-virus software and can therefore get one of the free anti-virus software applications and use it with the filter.

Also, some users don't trust their anti-virus software to delete their e-mails automatically because of possible "false positives" (the e-mail doesn't have any viruses in it, but their AV software thinks there is a virus). The filter will allow the user to make the choice (e.g. the filter says there is a virus in the e-mail and therefore it is Spam, but you can double-check it in the Recycle Bin).

Regards,

Bob

[AlexV]

I believe ClamAV is traditional for this sort of thing. It is a command line antivirus designed specifically for email scanning on mail gateways. GPL.[/url]

[Chactory]

Thank you, Bob, for explaining this to me.
Regards, Chactory

[Bob Loeffler]

I believe ClamAV is traditional for this sort of thing. It is a command line antivirus designed specifically for email scanning on mail gateways. GPL.[/url]

Hi AlexV,

Yes, ClamAV can do this. And the filter works well with ClamAV.

Regards,

Bob

[Bob Loeffler]

Thank you, Bob, for explaining this to me.
Regards, Chactory

You're welcome, Chactory!

Bob