The
Mail Collector
The
Mail Filter
The
Mail Server
 
Parse Report - How to get the name of the virus into the non-delivery report

General

  • Download ParseReport and copy ParseReport.vbs into the program directory
  • Start MBAdmin, select View->Options->Virus and add the additional argument(s)
    from the scanner list to the current arguments for the scanner.

This tells the scanner to write a report into a temp file that is provided by XWall/POPBeamer/SMTPBeamer.

Note: <TEMPFILE> is a variable that XWall/POPBeamer/SMTPBeamer fills with a temporary filename at runtime.

  • Add the following lines to xwall.ini/popbeam.ini/smtpbeam.ini
VirusPostScanner=ParseReport.vbs VirusPostScannerPara=<TEMPFILE> <MSGFILE> 

Adjust the second line according to the scanner settings in the list below.

This tells XWall/POPBeamer/SMTPBeamer to run ParseReport.vbs 
with the report file created by the scanner as the input file and a new file as the output file. The content of the output file will then be added to the non-delivery report and the statistic file.

Note: <TEMPFILE> and <MSGFILE> are variables that XWall/POPBeamer/SMTPBeamer fills with the name of a temporary file at runtime. So you need to type them literally ( "as is" )

  • Here is a sample how the lines in  xwall.ini/popbeam.ini/smtpbeam.ini
    look like when you are using the McAfee scanner:

VirusScanner=c:\mcafee\scan.exe
VirusScannerPara=<FILE> /ALL /SILENT /NOBEEP /ANALYZE /UNZIP /NOMEM /PROGRAM /REPORT <TEMPFILE>
VirusPostScanner=ParseReport.vbs
VirusPostScannerPara=<TEMPFILE> <MSGFILE> MCAFEE40


McAfee

  • McAfee Command Line 4.x/5.x

Additional scanner arguments:

/REPORT <TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> MCAFEE40

 


Computer Associates

  • Inoculan 6.0, 7.0 / InoculateIT 6.0, 7.0

Additional scanner arguments:

-LIS:<TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> INOCULAN40
 
  • Inoculan 4.0 / InoculateIT 4.5

Additional scanner arguments:

> <TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> INOCULAN40
 

Sophos

  • Anti-Virus

Additional scanner arguments:

-p=<TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> SOPHOS30

F-PROT

  • F-PROT 3.14a

Additional scanner arguments:

/report=<TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> FPROT314

Trend Micro

  • VSCANTM Ver 1.0

Additional scanner arguments:

/LR=<TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> TREND10

ClamAV

  • ClamAV for Windows 0.88-2

Additional scanner arguments:

--log=<TEMPFILE>

Arguments for the script:

<TEMPFILE> <MSGFILE> CLAMAV