* Török Edwin wrote: > On 2011-04-16 17:06, Nathan Gibbs wrote: >> >> I'm guessing that clcb_post_scan can be used to ambush the virus name >> soon after it escapes from libclamav. > > It allows you to get a callback
Whatever that is. :-) > for every file we scan (including archive members), and see the result of > the scan and virusname. OK, so I could, ( providing I knew what I was doing ), get the virus name as it came out of libclamav. > You should be able to implement your custom virusaction() using that, and > you can transform the virusname any way you like for the custom > virusaction. > Thats not really what this particular effort is about. I've been mostly done with the virusaction stuff since CCEE 0.96.5 In CCEE 0.97.x I've been extending clamd. Which is right along the lines of what the OP wants. The OP wanted ( Re: *.UNOFFICIAL Virus Names ): "It is a non-optional logging feature of ClamAV. I'd like to see a config option in there to turn it on or off. As it is I edit the source code at each build and turn it off." He apparently hacks a few lines out of libclamav to get what he needs, but not what he wants. What he wants requires hacking what sits on top of libclamav (clamd). I'm already in there running around with a chainsaw, so whats one more hack. We both are modifying the source code before we build for our environments. What he wants is a good idea, and am trying to build it into what I'm doing. If I was a c coder, I'd be done last week already. :-) >> I don't see it being used in the higher level programs, so there is no >> example to learn from. > > It is used here, but in a more complicated way than you need: > http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob;f=win32/clamav-for-windows/clamav-for-windows/interface.c > OK, I'll take a look at that. Thanks, -- Sincerely, Nathan Gibbs Systems Administrator Christ Media http://www.cmpublishers.com
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml