ME with Kaspersky for Windows File Server 8.0 - working reg key

RNEUSCHUL
Posts: 92
Joined: Wed Jan 27, 2010 11:16 pm

ME with Kaspersky for Windows File Server 8.0 - working reg key

Postby RNEUSCHUL » Thu Feb 09, 2017 5:44 pm

The following registry key almost works as desired with ME Enterprise 9 - it deletes infected mails but does not allow cleaning of affected items and therefore will not change the subject line of inbound mails, or substitute a "removed" line for infected attachments. In other words this is binary; all infected items are deleted without notice to recipients or senders.

Note specifically that this is a WOW 64 registry key.

Perhaps MailEnable might like to update ME020469 to reflect this information for use on Windows >=2008R2/2012R2

Please note that setting error code deletion may not work as expected: have tested in different configurations and had different results - not yet discovered how/why some instances work and others do not: for safety set to "Command line arguments will delete attachments" after importing the registry key.

************************
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVKAS]
"Status"=dword:00000001
"Antivirus Notification Message"="Infected attachment removed."
"Antivirus Scratch Directory"=""
"Antivirus Parameters"="\"[AGENT]\" scan \"D:\\MailEnable\\Scratch\" /AI:delete"
"Provider DLL"="MEAVGEN.DLL"
"Program Name"="Kaspersky Antivirus for File servers 8"
"Program Info"="This is a template for new virus scanners."
"Exit Code Enabled"=dword:00000000
"Exit Codes Error Inclusive"=dword:00000001
"Exit Codes"="3 8"
"Type"=dword:00000001
"Antivirus Agent"="C:\\Program Files (x86)\\Kaspersky Lab\Kaspersky Anti-Virus 8.0 For Windows Servers Enterprise Edition\\kavshell.exe"
"Send Return Notification"=dword:00000000
"Notification Address"=""
"Message Handling"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVKAS\Default]
"Antivirus Parameters"="\"[AGENT]\" \"[FILENAME]\" /memory /AI:delete"
"Exit Code Enabled"=dword:00000001
"Exit Codes Error Inclusive"=dword:00000001
"Exit Codes"="3 8"

Who is online

Users browsing this forum: No registered users and 12 guests