h d Z ddlZddlZddlZddlZddlmZmZ ddlm Z ddl
m Z ddl m
Z
ddlmZmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)MalwareMalwareSignatures) HookEvent)g)resource_limits)AIBOLIT_SCAN_INTENSITY_KEYMalwareScanResourceType)MalwareIgnorePath)MDS_PATH)MDSDetachedScanDir)
get_memoryc " e Zd Zd Zd ZddZdS )MalwareDatabaseScannerc h || _ || _ || _ || _ || _ || _ || _ d S N)scan_id initial_pathpaths
intensity_cpu intensity_io
intensity_ram scan_type) selfr r r r r r r _s U/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/mds/scanner.py__init__z MalwareDatabaseScanner.__init__* s= (
* ( *" c @ dt dd| j d dt j dt |j d| j dt |j d t |j d
t j d t | j d t t j
gS )
Nz/opt/ai-bolit/wrapperz--scanz--pathr z--avdbz
--report-filez
--detachedz
--progressz
--ignore-listz --procudbz--memoryz --db-timeout)r r r MDS_AI_BOLIT_HOSTERstr report_filer
progress_file ignore_file MDS_PROCU_DBr
r r MDS_DB_TIMEOUT)r work_dirs r _cmdzMalwareDatabaseScanner._cmd= s # JqM 1 $ % % L & ' ' $ % % * t) * * & ' '+
r Nc K t | j 5 }|j d d t j t j j D |
| }|| j | j d}|j
d 5 }t j || d d d n # 1 swxY w Y |j d 5 }|j d 5 }t' j | j | j | j |pt+ j }t, j | d {V t3 j || j | j d||t; | t< | j d {V d d d n # 1 swxY w Y d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )
N
c 3 b K | ]*}t j t j | V +d S r )base64 b64encodeosfsencode).0paths r z.MalwareDatabaseScanner.scan..Y sK $R[%6%677 r )
resource_type)cmdr r w)mode)r r r0 startedT)r r start_new_sessionstdoutstderrcwdkey) r r r# write_bytesjoinr
path_listr DBvaluer' r r scan_info_fileopenjsondumplog_fileerr_filer MalwareScanningStartedtimer sinkprocess_messager create_subprocessr r r r ) r r6 r& r3 scan_infofpl_fe_fscan_started_events r scanzMalwareDatabaseScanner.scanV s+
-
- % , ,
1 ;&=&@&F! ! !
))H%%C $ 1 !^ I
(--3-77
)2 )R(((
)
)
)
)
)
)
)
)
)
)
)
)
)
)
)"'' (
h',,#,66
:=%.%E L "n * # 2ty{{ & & &" f,,-?@@@@@@@@@%7"&"4!%!2&* H
24>B
#% % % % % % % % % % % % % % % % % % s BG91C G9C G9C G99 G!B)G
> G!
G G!G G! G9!G% %G9(G% )G99G= G=r )__name__
__module__ __qualname__r r' rQ r r r r ) sF # # #&
2& & & & & &r r )__doc__r+ rC r- rH defence360agent.contracts.configr r %defence360agent.contracts.hook_eventsr &defence360agent.internals.global_scoper defence360agent.utilsr imav.malwarelib.configr r imav.malwarelib.modelr
imav.malwarelib.scan.mdsr !imav.malwarelib.scan.mds.detachedr imav.malwarelib.utilsr
r rU r r r` s1 *
G G G G G G G G ; ; ; ; ; ; 4 4 4 4 4 4 1 1 1 1 1 1 4 3 3 3 3 3 - - - - - - @ @ @ @ @ @ , , , , , ,S S S S S S S S S Sr