savscan / via socket ?

for example something like clamdscan which permits to scan files using the clamAV daemon.

Hi Kaneki 

savscan is the only command line manual scan option available in the SAV for Linux and Unix, however, I'll still discuss the query once I have an idea about how Clamdscan works so it'd great if you can explain a bit more about how clamdscan works. 

Sure

In clamAV antivirus there are two commands

clamscan /file

and

clamdscan /file


clamscan is exactly the same of savscan .  clamscan and savscan are very slow to run because when you start them they need to load in memory all signature database.
So clamscan and savscan are not good if you need to execute them very often .

clamdscan is a clamscan daemon which can be started on request .
If the service/daemon is started when I scan files using clamdscan the behaviour to scan a file is like with clamscan or savscan,
BUT the signatures are already in daemon memory, so the scan check returns immediately .

• Add to Phrasebook
   
  • No word lists for English -> Italian...
     
  • Create a new word list...
• Copy

Hi Kaneki 

Thank you for the information.

There are three types of Scanning available in SAV for Linux.

1. Scheduled Scan - Simply scheduled for particular date and time.

2. On-demand Scanning - This can be triggered using savscan command which is manually scanning option for the user which is exactly the right click Scan in Windows.

3. On-access Scanning - SAV for Linux performs scanning whenever any file is getting a download on the machine, or copied to machine or you modify any file and save it.

Whenever you are uploading any file to the server which is basically gets copied to the machine from another machine, SAV for Linux will scan that file by default and it is malicious, Sophos will delete it and will not allow it to be copied on the machine.

Whenever you are uploading any file to the server which is basically gets copied to the machine from another machine, SAV for Linux will scan that file by default and it is malicious, Sophos will delete it and will not allow it to be copied on the machine.

>

does it includes check for email , archives ... because I need to execute a full scan ? If no, this solution is not good.

Hi Kaneki 

Would you please suggest when you say email or archive, you are pointing it towards the .pst file or .ost file of the mailbox?

Hi Kaneki 

Would you please suggest when you say email or archive, you are pointing it towards the .pst file or .ost file of the mailbox?

I'm talking about the savscan -f option which scan all kinds of files (email and archive included) .

Hi Kaneki 

This command is for the full system scan and it will scan single email/archives copied to the machine, it will not scan your mailbox on the machine.

Please provide me with a link to any document which states that mailbox will be scanned with full scan.