[pmg-devel] Spam scanning after virus is found
Dietmar Maurer
dietmar at proxmox.com
Thu Apr 19 10:15:12 CEST 2018
> What about this code:
Thinks would be much easier if you send diffs ...
>
> # if quick mode is disabled then consider clamav heuristic
> if (my $hit = $queue->{clamav_heuristic} && !$enable_quick_av_mode ) {
> my $score = $queue->{clamav_heuristic_score};
> my $descr = "ClamAV heuristic test: $hit";
> my $rule = 'ClamAVHeuristics';
> $sa_score += $score;
> $list .= $list ? ",$rule" : $rule;
> push @$sa_scores, { score => $score, rule => $rule, desc => $descr
> };
> }
>
> # do not run SA if avast have found virus
> if ( ($queue->{vinfo_avast} || $queue->{vinfo_clamav} ) &&
> $enable_quick_av_mode ) {
> my $score = 5 ;
> my $descr = "Virus Scanner Engines have found on or more viruses";
> my $rule = 'AV_Virus_Found';
> $sa_score += $score;
> $list .= $list ? ",$rule" : $rule;
> push @$sa_scores, { score => $score, rule => $rule, desc => $descr
> };
I don't really understand the purpose of this. It is a virus, so marking it
as SPAM makes no sense to me?
More information about the pmg-devel
mailing list