Hi there,

On Tue, 18 Sep 2018, Jeff wrote:

Below is all I have found for Windows:
...
cmd /c clamscan.exe -r -i "%scan%" ...
...
How do I tweak the code above ...

However you tweak it, do please make sure that what you're doing does
not make things worse rather than better.

For example, where does "%scan%" come from?  If it's from an untrusted
source such as a user-supplied file or pathname, you'd be well advised
to sanitize it carefully.  Perhaps, also, even if it isn't. :)

If I were using a Linux box it would probably be 'clamdscan' (to send
the file to the clamd daemon, which already has the database loaded)
rather than 'clamscan' (which would probably take a minute or two to
load the database(s) before starting a scan).  I know little about the
Windows versions of ClamAV, but from the very minimal research that I
just did I believe that much the same approach is possible.

--

73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to