Daemonized Scanners
F-PROT Antivirus for BSD/Linux/Solaris, version 6
['F-Prot fpscand', # F-PROT Antivirus for BSD/Linux/Solaris, version 6
\&ask_daemon,
["SCAN FILE {}/*\n", '127.0.0.1:10200'],
qr/^(0|8|64) /m,
qr/^([1235679]|1[01345]) |<[^>:]*(?i)(infected|suspicious|unwanted)/m,
qr/(?i)<[^>:]*(?:infected|suspicious|unwanted)[^>:]*: ([^>]*)>/m ],
F-PROT Antivirus (older versions)
['F-Prot f-protd',
\&ask_daemon,
["GET {}/*?-dumb%20-archive%20-packed HTTP/1.0\r\n\r\n",
['127.0.0.1:10200', '127.0.0.1:10201', '127.0.0.1:10202',
'127.0.0.1:10203', '127.0.0.1:10204'] ],
qr/(?i)<summary[^>]*>clean<\/summary>/m,
qr/(?i)<summary[^>]*>infected<\/summary>/m,
qr/(?i)<name>(.+)<\/name>/m ],
Command-Line Scanners
F-PROT Antivirus for UNIX, version 6
['F-PROT Antivirus for UNIX', ['fpscan'],
'--report --mount --adware {}', # consider: --applications -s 4 -u 3 -z 10
[0,8,64], [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3],
qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/m ],
F-PROT Antivirus (older versions)
['FRISK F-Prot Antivirus', ['f-prot','f-prot.sh'],
'-dumb -archive -packed {}', [0,8], [3,6], # or: [0], [3,6,8],
qr/(?:Infection:|security risk named) (.+)|\s+contains\s+(.+)$/m ],
