.
Viromat ver. 0.03pre alpha
03 May 2001

  • News
  • Usage
  • Details
  • Installation
  • Download
  • Links
  • Contact

    		• Viromat a HTTP virusscan program

    NEWS

  • 03 May 2001
  • development on viromat stopped
  • PLEASE USE Viralator its stable and now also GPL, thanks! Ralph

  • 30 Mar 2001
  • development on viromat temporarily stopped
  • I'll try to release a patch to support PHP4 next month
  • lately found a viromat clone written in perl --> Viralator

  • 11 Nov 2000
  • Bug in Javascript code with IE (no change to the refering page)

  • New version 003pre
  • code optimized
  • now it opens a new window for each new download
  • bugs removed
  • better error handling

  • php3 function "fopen" doesnt return any errorcodes (like "no such file",...) that means I have to do the socket operations/ ftp connection handling manually :-( (I hope in ver. 004)

    Usage

  • With Viromat its possible to search for virus infected software on internet downloads before the user get/install it on his desktop pc.

    Details

  • The user send a download request to the proxy server
  • Squid give the url to the redirector Squirm
  • the URL is scaned, if it contains any of .exe .zip ....
  • Squirm give an changed URL back to Squid that points to localhost/viromat.php3?url=originalurl
  • viromat.php3 recieve the file/archive and inform the user about the status
  • the user see the file growing through the HTTP refresh mechanism
  • viromat.php3 call the scandown shell script (changed scanmail.sh from amavis)
  • scandown uncompress the file/archive and call the virusscan program (AVP,...)
  • if no virus found the user get an link to the file/archive on localhost

    Installation

    What you need:

  • The AmaVis package for securezip/tar
  • WWW- Proxy Server Squid
  • WWW- Redirector Squirm
  • Webserver Apache withPHP3
  • Linux Virus scanner (AVP, Antivir,...)
    1. install Squid/ Squirm/ Apache / php3
    2. edit squid.conf add squirm as redirector program
    3. edit the Viromat squirm.patterns file / install it to the squirm /etc path
    4. edit viromat.php3 and viromatstat.php3 change hostnames/ path
    5. copy the scandown script to /usr/sbin/ , edit scandown to change pathnames
    6. please see README for detailed instructions

    Download

    viromat_prea003.tar.gz

    Links

    Viralator
    www.amavis.org
    www.openantivirus.org
    LCS- Linux-Communication-Server

    Contact

    ralph.meyer( at )hycomat.co.uk