Andreas, > I use now this to get the virusname only: > qr/ALERT: (?:.* <<< )?(.+?)(?: ; |$)/m > > ... a partial copy from the savapi definition in amavisd.conf :-)
Thanks! Will update my entry. I wonder whether the "FUND" alternativce is still needed. Probably a localized text. To stay on the safe side, I'll keep it, unless told otherwise: ### Avira for UNIX 3.x ['Avira AntiVir', ['avscan'], '-s --batch --alert-action=none {}', [0,4], qr/(?:ALERT|FUND):/m, qr/(?:ALERT|FUND): (?:.* <<< )?(.+?)(?: ; |$)/m ], Mark ------------------------------------------------------------------------------ The modern datacenter depends on network connectivity to access resources and provide services. The best practices for maximizing a physical server's connectivity to a physical network are well understood - see how these rules translate into the virtual world? http://p.sf.net/sfu/oracle-sfdevnlfb _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org