From 9f1a7beb7c14034caa2fca67a547bef80fbe675c Mon Sep 17 00:00:00 2001
From: Arne Fahrenwalde <macgeneral@macgeneral.de>
Date: Sat, 27 Jan 2018 21:38:19 +0100
Subject: [PATCH] [Fix] Virus infection string for F-PROT Antivirus

Fixes the error "(rspamd_proxy) ; lua; antivirus.lua:396: Unhandled response: 1 <contains infected objects: VIRUSNAME>" and therefore no handled detection
---
 src/plugins/lua/antivirus.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/plugins/lua/antivirus.lua b/src/plugins/lua/antivirus.lua
index 59ec3ad0d..33c1d738e 100644
--- a/src/plugins/lua/antivirus.lua
+++ b/src/plugins/lua/antivirus.lua
@@ -410,7 +410,7 @@ local function fprot_check(task, rule)
             rspamd_logger.infox(task, '%s [%s]: message is clean', rule['symbol'], rule['type'])
           end
         else
-          local vname = string.match(data, '^1 <infected: (.-)>')
+          local vname = string.match(data, '^1 <contains?%s?infected%s?objects?: (.-)>')
           if not vname then
             rspamd_logger.errx(task, 'Unhandled response: %s', data)
           else
-- 
2.39.5