Custom antivirus filter not working correctly.

Discussion forum for Enterprise Edition.
Post Reply
a.loffredo
Posts: 5
Joined: Thu Apr 18, 2019 8:04 am

Custom antivirus filter not working correctly.

Post by a.loffredo » Tue Mar 15, 2022 9:46 am

Hello,
Following your guide we added ESET antivirus the antivirus application presets in Mail Enable Antivirus Filter.

The test settings button works as expected. It downloads the test virus, identifies it and remove the offending file from the Scratch folder and it pops out a notification stating "The configuration for this antivirus module appears to be correct.".

Neverthless, when we receive a mail containing a virus, the antivirus does not get called correctly, and if we inspect the logs we can see this lines:


Failed to execute antivirus program:193 ("E:\MAILEN~1\Scratch\688CAE~1.MAI\1.ATT")
Failed to execute antivirus program:193 ("E:\MAILEN~1\Scratch\688CAE~1.MAI\2.ATT")

we also had the MTA service started with admin rights as suggested but still no joy.

Can abybody tell me what is wrong and how to get it working?


Just for the record, this is the registry entry we added:

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mail Enable\Mail Enable\Agents\MTA\Filters\ESET]
"Status"=dword:00000001
"Antivirus Notification Message"="Virus eliminato da ME-AV"
"Antivirus Scratch Directory"="E:\\Mail Enable\\Scratch"
"Antivirus Parameters"="\"[FILENAME]\""
"Antivirus Agent"="C:\\Program Files\\ESET\\ESET Security\\ecls.exe"
"Provider DLL"="MEAVGEN.DLL"
"Program Name"="ESET"
"Program Info"="ESET Antivirus - BancaPromos"
"Exit Code Enabled"=dword:00000001
"Exit Codes Error Inclusive"=dword:00000001
"Exit Codes"="1 50"
"Type"=dword:00000001
"Capture Output"=dword:00000001
"Send Return Notification"=dword:00000000
"Notification Address"=""
"Message Handling"=dword:00000000

thanks

Post Reply