NAI McAfee AntiVirus

NAI McAfee AntiVirus (uvscan)

['NAI McAfee AntiVirus (uvscan)', 'uvscan',
  '--secure -rv --mime --summary --noboot - {}', [0], [13],
  qr/(?x) Found (?:
      \ the\ (.+)\ (?:virus|trojan)  |
      \ (?:virus|trojan)\ or\ variant\ ([^ ]+)  |
      :\ (.+)\ NOT\ a\ virus)/m,
# sub {$ENV{LD_PRELOAD}='/lib/libc.so.6'},
# sub {delete $ENV{LD_PRELOAD}},
],

Note 1: with RH9, force the dynamic linker to look at /lib/libc.so.6 before anything else by setting environment variable LD_PRELOAD=/lib/libc.so.6 and then clear it when finished to avoid confusing anything else.

Note 2: to treat encrypted files as viruses replace the [13] with:

qr/^\s{5,}(Found|is password-protected|.*(virus|trojan))/