wiki:AVFProt

FRISK F-Prot

Daemonized Scanners

F-PROT Antivirus for BSD/Linux/Solaris, version 6

['F-Prot fpscand',  # F-PROT Antivirus for BSD/Linux/Solaris, version 6
  \&ask_daemon,
  ["SCAN FILE {}/*\n", '127.0.0.1:10200'],
  qr/^(0|8|64) /m,
  qr/^([1235679]|1[01345]) |<[^>:]*(?i)(infected|suspicious|unwanted)/m,
  qr/(?i)<[^>:]*(?:infected|suspicious|unwanted)[^>:]*: ([^>]*)>/m ],

F-PROT Antivirus (older versions)

['F-Prot f-protd',
  \&ask_daemon,
  ["GET {}/*?-dumb%20-archive%20-packed HTTP/1.0\r\n\r\n",
    ['127.0.0.1:10200', '127.0.0.1:10201', '127.0.0.1:10202',
     '127.0.0.1:10203', '127.0.0.1:10204'] ],
  qr/(?i)<summary[^>]*>clean<\/summary>/m,
  qr/(?i)<summary[^>]*>infected<\/summary>/m,
  qr/(?i)<name>(.+)<\/name>/m ],

Command-Line Scanners

F-PROT Antivirus for UNIX, version 6

['F-PROT Antivirus for UNIX', ['fpscan'],
  '--report --mount --adware {}',  # consider: --applications -s 4 -u 3 -z 10
  [0,8,64],  [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3],
  qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/m ],

F-PROT Antivirus (older versions)

['FRISK F-Prot Antivirus', ['f-prot','f-prot.sh'],
  '-dumb -archive -packed {}', [0,8], [3,6],   # or: [0], [3,6,8],
  qr/(?:Infection:|security risk named) (.+)|\s+contains\s+(.+)$/m ],
Last modified 12 years ago Last modified on May 31, 2011, 6:20:38 AM