in reply to how to use file::scan

It's not really clear what you expect. I haven't run it myself, but the documentation for File::Scan says that the skipped() method:
skipped() This method return a code number if the file was skipped and 0 if +not. The following skipped codes are available: 0 file not skipped 1 file is not vulnerable 2 file has zero size 3 the size of file is small 4 the text file size is greater that the 'max_txt_size' argume +nt 5 the binary file size is greater that the 'max_bin_size' argu +ment

So if there are no errors, and no skipped files, then you should get zero for all these. What are you getting instead?

Seems to me that for useful testing you might actually want to put a single suspicious file on your disk! (But be careful! if you want to try this!)

Replies are listed 'Best First'.
Re: Re: how to use file::scan
by tsu (Novice) on Nov 19, 2002 at 21:01 UTC
    I get nothing (" ") for $e, and 0 for $c. So I guess that and empty field for $e means that there is no virus, as the 0 for $c means it was not skipped. I just wasn't sure if an empty $e field means nothing was found.

    Yes, I thought about using a suspicious file for testing, but our sys admin nixed that idea right off!.

    Thanks.