[Avcheck] (no subject)
Ørnulf Nielsen
avcheck-mailinglist@lincom.no
Tue, 04 Jun 2002 12:01:21 +0200
This is a multi-part message in MIME format.
--------------256780920B28CCDF48DB1893
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
> just upgrading kavdaemon to version 4.1.0.0 (I think the latest) and i'm
> having this problem when testing:
4.0.1.0 ;-)
> $ /var/spool/avp/uchroot -u avpc / /var/spool/avp/avcheck -n -f root -d
> /var/spool/avp/./tst -s avp:/var/spool/avp/ctl/AvpCtl root < eicar.msg
> avcheck: uexpected AVP return code 64 (0x0140)
>
> kavdaemon process loads ok in memory
>
> /kavdaemon -dl -MP -f=/ctl /tst
>
> what means "return code 64"? :P
After reading the manual (16.6 Scanner and Daemon: exit codes), I whip
up the enclosed script
$bash:~ > ./kavexitcode.sh 64
0: No viruses detected
4: Virus-definition databases are not detected
--------------256780920B28CCDF48DB1893
Content-Type: application/x-sh;
name="kavexitcode.sh"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="kavexitcode.sh"
#!/bin/bash
exitCode=$1
test -z "$exitCode" && {
echo -e "Usage:\t$0 <exitcode>"
exit 0;
}
lo=$[$exitCode%16]
hi=$[$exitCode/16]
case $lo in
0)
echo -e "0:\tNo viruses detected"
;;
1)
echo -e "1:\tScanning was interrupted"
;;
2)
echo -e "2:\tObjects containing a modified or damaged virus were detected"
;;
3)
echo -e "3:\tSuspicious objects were detected"
;;
4)
echo -e "4:\tOne or more viruses were detected"
;;
5)
echo -e "5:\tAll infected objects were disinfected"
;;
6)
echo -e "6:\tInfected objects were deleted"
;;
7)
echo -e "7:\tThe kavscanner or kavdaemon file is corrupted"
;;
8)
echo -e "8:\tFiles are corrupted or an I/O error has occured"
;;
*)
echo -e "$1:\tUnknown error (lo)"
esac
case $hi in
4)
echo -e "4:\tVirus-definition databases are not detected"
;;
8)
echo -e "8:\tVirus-definition databases are corrupted"
;;
*)
echo -e "$1:\tUnknown error (hi)"
;;
esac
exit 0
--------------256780920B28CCDF48DB1893--