Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 8 subscribers
  • Views 1480 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SAV32CLI possible content of scanning log

ent wildfire

Hi, i need to handle virus detection programmatically. I want to know when the virus detected.

By working with SAV32CLI i see something like this when virus detected:

Full Scanning

>>> Virus 'EICAR-AV-Test' found in file C:\eicar.com

1 file swept in 9 seconds.
1 virus was discovered.
1 file out of 1 was infected.

I want to know is there any other format for virus detection? For example type something else instead of ">>> Virus".

 

 

 


This thread was automatically locked due to age.
Parents
  • +1

    Hello ent wildfire,

    first of all, please note that sav32cli.exe is not intended for sophisticated automation or as scanning interface. May I ask what application you have in mind?

    I'm not aware of a detailed documentation of the possible messages but AFAIK detections (Virus, PUA, Suspicious etc. - depending on the switches used) are denoted by the >>>.

    Christian

  • 0 in reply to QC

    Hi. I just want to send files for scan and analyse scanning log file if detect any thing. Then save all information to use it later. I want to do it without interface and in background.

    Thanks for your help. 

     
  • 0 in reply to ent wildfire

    Hello ent wildfire,

    as you have already seen, there's a significant overhead associated with the use of sav32cli.exe as it has to verify,load, and initialize the detection data each time it is called.
    Furthermore, it provides no more insight that the On-Access scanner (unless you use more "aggressive" settings - and even then very rarely). It's mainly for use in Safe Mode or on a yet unprotected machine.

    Don't mention it!

    Christian

Reply
  • 0 in reply to ent wildfire

    Hello ent wildfire,

    as you have already seen, there's a significant overhead associated with the use of sav32cli.exe as it has to verify,load, and initialize the detection data each time it is called.
    Furthermore, it provides no more insight that the On-Access scanner (unless you use more "aggressive" settings - and even then very rarely). It's mainly for use in Safe Mode or on a yet unprotected machine.

    Don't mention it!

    Christian

Children
No Data
Unfiltered HTML