--- files/mailgraph.sh.in.orig	Tue Feb  6 13:25:03 2007
+++ files/mailgraph.sh.in	Tue Feb  6 13:24:29 2007
@@ -27,9 +27,9 @@
 mailgraph_enable=${mailgraph_enable:-"NO"}
 mailgraph_pidfile=${mailgraph_pidfile:-"%%DATADIR%%/mailgraph.pid"}
 mailgraph_flags=${mailgraph_flags:-"--logfile /var/log/maillog --daemon-rrd=%%DATADIR%% --ignore-localhost --daemon --daemon-pid=${mailgraph_pidfile}"}
-mailgraph_user=${mailgraph_user:-"%%MAILGRAPH_USER%%"}
-mailgraph_group=${mailgraph_group:-"%%MAILGRAPH_GROUP%%"}
-mailgraph_chdir=${mailgraph_chdir:-"%%DATADIR%%"}
+#mailgraph_user=${mailgraph_user:-"%%MAILGRAPH_USER%%"}
+#mailgraph_group=${mailgraph_group:-"%%MAILGRAPH_GROUP%%"}
+#mailgraph_chdir=${mailgraph_chdir:-"%%DATADIR%%"}
 
 load_rc_config $name
 
--- work/mailgraph-1.12/mailgraph.pl.orig	Tue Feb  6 13:25:26 2007
+++ work/mailgraph-1.12/mailgraph.pl	Tue Feb  6 13:27:47 2007
@@ -495,7 +495,10 @@
 	if($prog =~ /^postfix\/(.*)/) {
 		my $prog = $1;
 		if($prog eq 'smtp') {
-			if($text =~ /\bstatus=sent\b/) {
+			if($text =~ /VIRUS/) {
+				event($time, 'virus');
+			}
+			elsif($text =~ /\bstatus=sent\b/) {
 				return if $opt{'ignore-localhost'} and
 					$text =~ /\brelay=[^\s\[]*\[127\.0\.0\.1\]/;
 				return if $opt{'ignore-host'} and