Based on the recommended template I'm trying to use the following registry settings, but they appear to be having no effect: the various EICAR pseudo virus packages are not detected or deleted in testing. Running the MTA in debug mode isn't telling me anything - perhaps because I don't know what I need to look for.
This is using a registered version of Kaspersky AV for Windows File Servers v8.0
***********
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVKAS]
"Status"=dword:00000001
"Antivirus Notification Message"="Infected attachment removed."
"Antivirus Scratch Directory"=""
"Antivirus Parameters"="\"[AGENT]\" scan \"D:\\MailEnable\\Scratch\" /delete"
"Provider DLL"="MEAVGEN.DLL"
"Program Name"="Kaspersky Antivirus for File servers 8"
"Program Info"="This is a template for new virus scanners."
"Exit Code Enabled"=dword:00000000
"Exit Codes Error Inclusive"=dword:00000001
"Exit Codes"="3 8"
"Type"=dword:00000001
"Antivirus Agent"="C:\\Program Files (x86)\\Kaspersky Lab\Kaspersky Anti-Virus 8.0 For Windows Servers Enterprise Edition\\kavshell.exe"
"Send Return Notification"=dword:00000000
"Notification Address"=""
"Message Handling"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVKAS\Default]
"Antivirus Parameters"="\"[AGENT]\" \"[FILENAME]\" /memory /delete"
"Exit Code Enabled"=dword:00000001
"Exit Codes Error Inclusive"=dword:00000001
"Exit Codes"="3 8"
********
I have tried giving values in both the Scratch dir entry and the notification address; neither of them make any difference.
Any ideas what's going on?
