Mirrors/MalwareMultiScan
1
0
Fork 0
mirror of https://github.com/volodymyrsmirnov/MalwareMultiScan.git synced 2025-10-10 20:26:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

dr.web scanning backend

Browse Source
This commit is contained in:
Volodymyr Smirnov
2020-10-21 17:33:58 +03:00
parent 89515efd5d
commit d4703df14d
5 changed files with 87 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
MalwareMultiScan.Backends/Backends/Implementations/DrWebScanBackend.cs Normal file
View File

@@ -0,0 +1,32 @@
using System;
using System.IO;
using System.Text.RegularExpressions;
using MalwareMultiScan.Backends.Backends.Abstracts;
using Microsoft.Extensions.Logging;
namespace MalwareMultiScan.Backends.Backends.Implementations
{
public class DrWebScanBackend : AbstractLocalProcessScanBackend
{
public DrWebScanBackend(ILogger logger) : base(logger)
{
}
public override string Id { get; } = "drweb";
public override DateTime DatabaseLastUpdate =>
File.GetLastWriteTime("/var/opt/drweb.com/version/version.ini");
protected override string BackendPath { get; } = "/usr/bin/drweb-ctl";
protected override Regex MatchRegex { get; } =
new Regex(@".* - infected with (?<threat>[\S ]+)", RegexOptions.Compiled | RegexOptions.Multiline);
protected override bool ParseStdErr { get; } = false;
protected override string GetBackendArguments(string path)
{
return $"scan {path}";
}
}
}

28
MalwareMultiScan.Backends/Dockerfiles/DrWeb.Dockerfile Normal file
View File

@@ -0,0 +1,28 @@
FROM mindcollapse/malware-multi-scan-worker:latest
ARG DRWEB_KEY
ENV DRWEB_KEY=$DRWEB_KEY
ARG DRWEB_URL=https://download.geo.drweb.com/pub/drweb/unix/workstation/11.1/drweb-11.1.1-av-linux-amd64.run
ENV DRWEB_URL=$DRWEB_URL
RUN apt-get update && apt-get install build-essential ca-certificates wget -y
RUN wget -q $DRWEB_URL -O /tmp/drweb.run && \
chmod +x /tmp/drweb.run && \
DRWEB_NON_INTERACTIVE=yes /tmp/drweb.run && \
rm -f /tmp/drweb.run
RUN /opt/drweb.com/bin/drweb-configd -d -p /var/run/drweb-configd.pid && \
if [ -z "$DRWEB_KEY" ]; then drweb-ctl license --GetDemo; \
else drweb-ctl license --GetRegistered "$DRWEB_KEY"; \
fi && kill $(cat /var/run/drweb-configd.pid)
RUN /opt/drweb.com/bin/drweb-configd -d -p /var/run/drweb-configd.pid && \
(drweb-ctl update --Stop || exit 0) && \
drweb-ctl update && \
kill $(cat /var/run/drweb-configd.pid)
ENV BackendType=DrWeb
ENTRYPOINT /opt/drweb.com/bin/drweb-configd -d -p /var/run/drweb-configd.pid && /worker/MalwareMultiScan.Worker