[clamav-users] Batch file for Windows.

[G.W. Haywood]

Hi there,

On Tue, 18 Sep 2018, Jeff wrote:

> Below is all I have found for Windows:
> ...
> cmd /c clamscan.exe -r -i "%scan%" ...
> ...
> How do I tweak the code above ...

However you tweak it, do please make sure that what you're doing does
not make things worse rather than better.

For example, where does "%scan%" come from?  If it's from an untrusted
source such as a user-supplied file or pathname, you'd be well advised
to sanitize it carefully.  Perhaps, also, even if it isn't. :)

If I were using a Linux box it would probably be 'clamdscan' (to send
the file to the clamd daemon, which already has the database loaded)
rather than 'clamscan' (which would probably take a minute or two to
load the database(s) before starting a scan).  I know little about the
Windows versions of ClamAV, but from the very minimal research that I
just did I believe that much the same approach is possible.

-- 

73,
Ged.