<div dir="ltr">Hi.<div class="gmail_quote"><div dir="ltr"><div><br></div><div>I am trying to add a new AV engine to 15-av_scanners but I am really lost at the moment configuring the output. Could you help me?</div><div><br></div><div>First of all, this is the output with a clean email:</div><div><br></div><div>root@correo:~# drweb-ctl checkmail clean_email<br>/root/clean_email - Ok<br>Scanned objects: 1, scan errors: 0, threats found: 0, threats neutralized: 0.</div><div><br></div><div>And then, with infected one:</div><div><br></div><div>root@correo:~# drweb-ctl checkmail infected-mail<br>/root/infected-mail - Reject<br>/root/infected-mail//1/Webex.xls (application/vnd.ms-excel): infected with Exploit.Siggen3.28448<br>Scanned objects: 1, scan errors: 0, threats found: 1, threats neutralized: 0.<br>Scanned 194.62 KB in 0.03 s with speed 7208.22 KB/s.</div><div><br></div><div>I am trying to configure with:</div><div><br></div><div>
<table><tbody><tr><td id="m_-2693274936193509735gmail-LC2070">### <a href="http://www.drweb.com/" target="_blank">http://www.drweb.com/</a></td>
        </tr>
        <tr>
          </tr></tbody></table><table><tbody><tr><td id="m_-2693274936193509735gmail-LC2071">  ['Dr. Web Security Space

',</td>
        </tr>
        <tr>
          </tr></tbody></table><table><tbody><tr><td id="m_-2693274936193509735gmail-LC2072">    'drweb-ctl', 'checkmail {}',</td>
        </tr>
        <tr>
          </tr></tbody></table><table><tbody><tr><td id="m_-2693274936193509735gmail-LC2073">    qr/^Reject/m,,</td>
        </tr>
        <tr>
          </tr></tbody></table>    qr/^(?:infected with:\s+(.+)/m ], <br></div><div><br></div><div>But there is an error with this output:</div><div><br></div><div>Feb 18 17:52:39 correo amavis[26120]: (26120-01) (!)run_av (Dr. Web Security Space ) FAILED - unexpected exit 0, output="/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p003 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p004 - Reject: infected with Exploit.Siggen3.28448\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p005 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p002 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p001 - Ok\nScanned objects: 5, scan errors: 0, threats found: 1, threats neutralized: 0.\nScanned 144.75 KB in 1.28 s with speed 113.44 KB/s."<br>Feb 18 17:52:39 correo amavis[26120]: (26120-01) (!)Dr. Web Security Space  av-scanner FAILED: /usr/bin/drweb-ctl unexpected exit 0, output="/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p003 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p004 - Reject: infected with Exploit.Siggen3.28448\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p005 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p002 - Ok\n/var/lib/amavis/tmp/amavis-20220218T175237-26120-rpZ1yjkd/parts/p001 - Ok\nScanned objects: 5, scan errors: 0, threats found: 1, threats neutralized: 0.\nScanned 144.75 KB in 1.28 s with speed 113.44 KB/s." at (eval 110) line 950.<br>Feb 18 17:52:39 correo amavis[26120]: (26120-01) (!)WARN: all primary virus scanners failed, considering backups</div><div><br></div><div><br></div><div>Could you help me with the output configuration? Thanks in advance.</div><div><br></div><div>Diego<br></div></div>
</div></div>