Free hsp virus software for linux

Kvirus project is a board/puzzle game for the KDE Environment.

Kvirus is a board game for the KDE Environment and a clone of Ataxxlet originally written in Java.

The goal is to copy or jump your virus to eat up the enemy virus. Kvirus provides a cute interface with hours of fun.

Aegis project is a virus scanner for Linux, Unix and Windows with a simple and intuitive user interface.

Aegis supports scanning of subdirectories, hidden files and .zip and .tar archive files, and drag-and-drop of files from the Nautilus file browser, or your Gnome desktop. When a virus is detected you can choose to delete, quarantine or rename the file.

gadoyanvirus is a virus checker for qmail that works with the QMAILQUEUE patch by Bruce Guenter. gadoyanvirus scans incoming messages using the ClamAV anti-virus library.

Suspected messages are quarantined and a notification message can optionally be sent to the recipients.

The Qmail virus scanner (QScan) is a mail filter for Qmail that scans incoming messages using the Sophos Antivirus engine, immediately rejecting infected content.

It is designed to be minimalistic, yet extremely fast and secure, and uses multiple pipes instead of the traditional temporary files and privilege separation. It works with non-native versions of the virus scanner like under OpenBSD with Linux or FreeBSD emulation.


You must create a temporary directory to extract MIME attachments, and replace Qmails original qmail-queue program with Qscan. Quick way to achieve this for the impatients :

mkdir /var/qmail/qscan
chmod 700 /var/qmail/qscan
chown qmaild:qmail /var/qmail/qscan
ln /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue-old

Now, lets compile and install Qscan :

./configure --help

./configure [your beloved flags]

make install-strip

The last step is to replace the original qmail-queue program with our filter :

rm /var/qmail/bin/qmail-queue
ln -s /usr/local/sbin/qscan /var/qmail/bin/qmail-queue

Depending on your local configuration, it may be needed or not, but start with doing it :

chown qmaild:qmail /usr/local/sbin/qscan
chmod 6711 /usr/local/sbin/qscan

After testing, if everythings ok for you, remove the setuid bit :

chown 0:0 /usr/local/sbin/qscan
chmod 711 /usr/local/sbin/qscan

Sophie is a daemon which uses libsavi library from Sophos anti-virus vendor.
On startup, Sophie initializes SAVI (Sophos Anti-Virus Interface), loads virus patterns into memory, opens local UNIX domain socket, and waits for someone to connect and instructs it which path to scan. Since it is loaded in RAM, scanning is very fast. Of course, speed of scanning also depends on SAVI settings and size of the file.
Sophie was initially created for use with Virge, a mail virus/attachment scanning tool. Because of that, not all SAVI features are implemented in Sophie. My intention was not to create a tool that does the same job as sweep (Sophos tools), but to make fast and efficient tool that can detect virus - but not remove it or make XLS report on it (heh - this was a stupid joke, I presume ;).
At this point, some of the features (that have been requested) are implemented. Some are not, and might never be. So, please, when asking me to add things in Sophie, keep in mind that Sophie was created for Virge, not to be used as a virus scanning tool for a workstation.
This is how Sophie works:
Initializes SAVI inteface, and loads virus patterns
Creates a local UNIX socket (/var/run/sophie, by default)
Waits for someone to connect to the socket, and send path(s) on the local filesystem which need to be scanned
Sophie then forks a process, scans the path(s), and if virus is found, it stops scanning and returns result (1:virusname)
If no viruses were found, it just returns 0
Sophie then goes back to sleep...
Since virus patterns are always in memory, scanning is fast (fast in startup, not fast in execution :) and takes much less resources. For one run, it probably doesnt make a difference if you will use Sophie of Sweep. However, if you have a program (local mail delivery agent, for example) that needs to scan every few seconds/minutes - things are way different.
The difference I am talking about is not in scanning itself - when scanning is in progress, Sophie is little involved in it. Scanning speed depends on the SAVI setup, and on the size of the file being scanned (and if it is an archive, there might be hundreds, even thousands of files inside). However, the initialization of the engine is what count in this case.
Enhancements:
- etc/sophie.savi is now set with SAVI default. Names/values are set as to default SAVI settings from SetConfigDefaults(pSAVI) call.
- 28 new SAVI options added to etc/sophie.savi file. Options were taken with SAVI 3.77.
- Check for nanosleep before including rt library
- "Grp" options fix in sophie_init.c. Thanks to Markus Stumpf for spotting it.

Viralator is a Perl script that virus scans HTTP/FTP downloads request on a UNIX server after passing through the Squid proxy server.
Even when I implemented virus protection for my network email server we still continued to get the odd virus. Most of the viruses came from people using free webmail accounts like Hotmail or Yahoo and downloading the infected attachments to their machines or through downloading junk.
Rather than block access to the users I decided to look at how we could better protect the network. I looked at a couple of different products both comercial and free but they were either too expensive or did not meet my needs.
That is how Viralator was born. Viralator Proxy Virus Scanner is licenced under the GPL.
Viralator should work in any UNIX system that uses Apache and Squid servers. We have reports about successful instalations on:
- RedHat Linux
- Mandrake Linux
- SuSe Linux
- e-Smith Linux
- Slackware Linux
- Conectiva Linux
- Debian Gnu Linux
Supported Redirectors:
- Squirm
- SquidGuard
- Jesred
Supported Virus Scanners
- AntiVir
- AVP
- RAV
- Inoculate
- Sophos Sweep
- McAfee
- Trend
- Clamav
- Bit Defender (free edition)
The original concept for Viralator came from the Viromat project. Without Viromat the Viralator project would not have had a starting point. We can also thank Ralph Meyer for badgering me into releasing the script under the GPL.
Enhancements:
- Parenthesis are included on the regular expression used to validate URLs.
- The character set checking step, which was not working before last patch released, has been fixed.

AntiVirus Scanner is an anti-virus scanner for Endeavour Mark II that uses the ClamAV library (libclamav).

AntiVirus Scanner allows you to create a list of scan items for frequently scanned locations and features easy virus database updating, all in a simple GUI environment.

Simscan is a simple program that enables qmail-smtpd to reject viruses, spam, and block attachments during the SMTP conversation so the email never makes it into your computers. Very efficient and written in C. It is made from open source components and is completely free
Main features:
- Runs as a separate program under a separate user than any other qmail program to limit possible security problems.
- clamav virus scanning ( --enable-clamav (default yes ) ). Rejects email containing viruses.
- trophie/TrendMicro virus scanning.
- support for spamassassin 3.0 and 2.6 series.
- spamassassin scanning ( --enable-spam (default no ) ). Rejects email that has X-Spam-Flag: YES set.
- spamassassin hit level rejection ( --enable-spam-hits (default 10.0 ) ). Requires --enable-spam to be enabled. Allows for rejection of email above a certain hit count. All other email is passed through with spamassassin headers and changes.
- attachment blocking ( --enable-attach (default no ) ). Blocks emails with attachments listed in a control file.
- fine grained control of clamav/trophie/spamassassin/attachment blocking per user/per domain/per system. ( --enable-per-domain (default no))
- logging of virus name, IP and to/from addresses to smtpd log file when a virus is detected.
- configuration option to set custom spamc arugments --enable-spamc-args
- configuration option to add -u user@domain argument to spamc --enable-spamc-user
- received header which includes virus scanner and spamassassin version nformation
- works with open source Clam AntiVirus by the Clam Team.
- works with open source trophie virus scanner interface to TrendMicro.
- works with open source SpamAssassin by the Apache Group.
- works with open source QMAILQUEUE patch by Bruce Guenter.
- works with open source ripmime by Paul Daniels.
- works with freely distributable Qmail by D. J. Bernstien.
Enhancements:
- virus drop message was not exiting at the right time. Found by Russ Lists
- use per domain hit count on spam log message if set.
- if read from standard in fails the temp file was not closed so the temporary work directory would not be removed.