#!/bin/bash # ################################################################ # # Virus Scanner GUI for # # - f-prot # - uvscan (McAfee) # - clamscan # ################################################################ # # Urs Beyerle # # (some parts taken from f-prot_gui.sh by Fabian Franz) # ################################################################ # MyVersion=0.3 # ################################################################ clean_exit() { rm -rf /tmp/psi-scanvirus.$$ } trap "clean_exit" EXIT ### ------------------------------------------------------------ ### definitions ### ------------------------------------------------------------ ### scan engine list ENGINE_LIST="" ### fprot FPROT=$(which f-prot) if [ $FPROT ]; then FPROT_NAME="F-Prot" FPROT_OPT="-all -ai -archive -dumb -packed -list" FPROT_CHECKUPDATES=/usr/local/f-prot/tools/check-updates.pl FPROT_ON="1" ENGINE_LIST="$ENGINE_LIST $FPROT_NAME $FPROT On" fi ### uvscan (McAfee) UVSCAN=$(which uvscan) if [ $UVSCAN ]; then UVSCAN_NAME="McAfee" UVSCAN_OPT="--secure -v -r --summary" UVSCAN_CHECKUPDATES=/usr/local/uvscan/update-dat UVSCAN_ON="1" ENGINE_LIST="$ENGINE_LIST $UVSCAN_NAME $UVSCAN On" fi ### clamscan (Clam) CLAM=$(which clamscan) if [ $CLAM ]; then CLAM_NAME="Clam" CLAM_OPT="-r" if [ -x /usr/bin/psi-freshclam ]; then CLAM_CHECKUPDATES=/usr/bin/psi-freshclam else CLAM_CHECKUPDATES=/usr/bin/freshclam fi CLAM_ON="1" ENGINE_LIST="$ENGINE_LIST $CLAM_NAME $CLAM On" # Starting Clam AntiVirus Daemon /etc/init.d/clamd start >/dev/null fi ### tmpdir TMPDIR=/tmp/psi-scanvirus.$$ TMP=$TMPDIR/dialog mkdir -p $TMPDIR ### report dir REPORT_DIR="/var/log/psi-scanvirus" mkdir -p /var/log/psi-scanvirus ### dialog or xdialog? DIALOG="dialog" XDIALOG_HIGH_DIALOG_COMPAT=1 export XDIALOG_HIGH_DIALOG_COMPAT [ -n "$DISPLAY" ] && [ -x /usr/bin/Xdialog ] && DIALOG="Xdialog"; XDIALOG="yes" ### title TITLE="PSI Virus Scanner v$MyVersion" MENU_TITLE="PSI Virus Scanner v$MyVersion" ### need root rights to run! ### ------------------------------------------------------------ if [ "$UID" -ne "0" ]; then MESSAGE0="To use this program, you need to be root" $DIALOG --title "$TITLE" --msgbox "$MESSAGE0" 0 0 exit 1 fi ### ------------------------------------------------------------ ### functions ### ------------------------------------------------------------ psi-freshclam() ### ------------------------------------------------------------ { echo echo "***************************************" echo "* Clam Antivirus Updater *" echo "***************************************" echo echo "Run /usr/bin/freshclam:" /usr/bin/freshclam echo } ### ------------------------------------------------------------ welcome_message() { WELCOME_MESSAGE=$( cat <<EOF --------------------------------------------\n Welcome to PSI Virus Scanner v$MyVersion\n --------------------------------------------\n PLEASE NOTE: No files will be delete.\n \n Press OK to continue\n EOF) [ $XDIALOG ] && echo $TITLE $DIALOG --title "$TITLE" --infobox "$WELCOME_MESSAGE" 0 0 8 [ $? -ne 0 ] && exit } ### ------------------------------------------------------------ find_partitions() { PART_ALL=$(LC_ALL=C fdisk -l | sed 's/*//g' | egrep -v "swap|Extended|Ext." | awk '{ print $1 }' | grep "/dev/") PART_LIST=$(LC_ALL=C fdisk -l | sed 's/*//g' | egrep -v "swap|Extended|Ext." | awk '{ printf("%s %s-Partition off\n",$1,$6 $7 $8 $9) }' | grep "/dev/") # add "Select all" PART_LIST="$PART_LIST Select All off" } ### ------------------------------------------------------------ choose_parts() { MESSAGE2="Found partitions" $DIALOG --title "$TITLE" --checklist "$MESSAGE2" 0 0 0 $PART_LIST 2>$TMP PARTS=$(sed 's,",,g;s,//, /,g' $TMP) # all selected ? grep -q "Select" $TMP if [ "$?" = "0" ]; then PARTS=$PART_ALL fi [ $XDIALOG ] && echo "Partition(s) selected:" [ $XDIALOG ] && echo $PARTS [ -n "$PARTS" ] && FILES="" } ### ------------------------------------------------------------ choose_dirfile() { $DIALOG --title $TITLE --fselect "$(pwd)/" 0 0 2>$TMP FILES=$(cat $TMP) [ -n "$FILES" ] && PARTS="" } ### ------------------------------------------------------------ choose_engine() { MESSAGE_ENGINE="Available Virus Scan Engine(s)" $DIALOG --title "$TITLE" --checklist "$MESSAGE_ENGINE" 0 0 4 $ENGINE_LIST 2>$TMP # create new engine list ENGINE_LIST="" # deselect f-prot ? grep -q $FPROT_NAME $TMP if [ "$?" = "0" ]; then ENGINE_LIST="$ENGINE_LIST $FPROT_NAME $FPROT On"; FPROT_ON="1" else ENGINE_LIST="$ENGINE_LIST $FPROT_NAME $FPROT Off"; FPROT_ON="" fi # deselect uvscan ? grep -q $UVSCAN_NAME $TMP if [ "$?" = "0" ]; then ENGINE_LIST="$ENGINE_LIST $UVSCAN_NAME $UVSCAN On"; UVSCAN_ON="1" else ENGINE_LIST="$ENGINE_LIST $UVSCAN_NAME $UVSCAN Off"; UVSCAN_ON="" fi # deselect clamscan ? grep -q $CLAM_NAME $TMP if [ "$?" = "0" ]; then ENGINE_LIST="$ENGINE_LIST $CLAM_NAME $CLAM On"; CLAM_ON="1" else ENGINE_LIST="$ENGINE_LIST $CLAM_NAME $CLAM Off"; CLAM_ON="" fi } ### ------------------------------------------------------------ define_report() { DATE=$(date +"%Y-%m-%d") DIVIDER="------------------------------------------------------------------------------------------" DOTS=".........\n.........\n........." ### where to report REPORT_TMP=$REPORT_DIR/report.tmp rm -rf $REPORT_TMP touch $REPORT_TMP NR=$(ls $REPORT_DIR/$PREFIX* 2>/dev/null | wc -l | tr -d " ") if [ $FPROT_ON ]; then FPROT_REPORT="$REPORT_DIR/report_fprot-$DATE-$NR.txt" FPROT_REPORT_MIN="$REPORT_DIR/report_fprot-$DATE-$NR.min.txt" echo $DIVIDER > $FPROT_REPORT echo "F-Prot Report:" >> $FPROT_REPORT cat $FPROT_REPORT > $FPROT_REPORT_MIN fi if [ $UVSCAN_ON ]; then UVSCAN_REPORT="$REPORT_DIR/report_mcafee-$DATE-$NR.txt" UVSCAN_REPORT_MIN="$REPORT_DIR/report_mcafee-$DATE-$NR.min.txt" echo $DIVIDER > $UVSCAN_REPORT echo "McAfee Report:" >> $UVSCAN_REPORT echo $DIVIDER >> $UVSCAN_REPORT $UVSCAN --version >> $UVSCAN_REPORT cat $UVSCAN_REPORT > $UVSCAN_REPORT_MIN fi if [ $CLAM_ON ]; then CLAM_REPORT="$REPORT_DIR/report_clam-$DATE-$NR.txt" CLAM_REPORT_MIN="$REPORT_DIR/report_clam-$DATE-$NR.min.txt" echo $DIVIDER > $CLAM_REPORT echo "Clam Report:" >> $CLAM_REPORT echo $DIVIDER >> $CLAM_REPORT $CLAM --version >> $CLAM_REPORT cat $CLAM_REPORT > $CLAM_REPORT_MIN fi } ### ------------------------------------------------------------ report_fprot() { [ $XDIALOG ] && echo -n "Creating F-Prot report... " # create report (normal and min) # normal report echo $DIVIDER >> $FPROT_REPORT echo $PART_TOSCAN >> $FPROT_REPORT echo $DIVIDER >> $FPROT_REPORT cat $REPORT_TMP >> $FPROT_REPORT echo $DIVIDER >> $FPROT_REPORT echo >> $FPROT_REPORT # min report echo $DIVIDER >> $FPROT_REPORT_MIN echo $PART_TOSCAN >> $FPROT_REPORT_MIN echo $DIVIDER >> $FPROT_REPORT_MIN head -n 25 $REPORT_TMP >> $FPROT_REPORT_MIN echo -e $DOTS >> $FPROT_REPORT_MIN tail -n 20 $REPORT_TMP >> $FPROT_REPORT_MIN echo $DIVIDER >> $FPROT_REPORT_MIN grep " Infection: " $REPORT_TMP >> $FPROT_REPORT_MIN grep " Infection: " $REPORT_TMP if [ "$?" = "0" ]; then echo "VIRUS INFECTION FOUND !!!" >> $FPROT_REPORT_MIN [ $XDIALOG ] && echo "VIRUS INFECTION FOUND !!!" echo $DIVIDER >> $FPROT_REPORT_MIN fi echo >> $FPROT_REPORT_MIN rm -f $REPORT_TMP touch $REPORT_TMP [ $XDIALOG ] && echo " done." } ### ------------------------------------------------------------ report_uvscan() { [ $XDIALOG ] && echo -n "Creating McAfee report... " # create report (normal and min) # normal report echo $DIVIDER >> $UVSCAN_REPORT echo $PART_TOSCAN >> $UVSCAN_REPORT echo $DIVIDER >> $UVSCAN_REPORT cat $REPORT_TMP >> $UVSCAN_REPORT echo $DIVIDER >> $UVSCAN_REPORT echo >> $UVSCAN_REPORT # min report echo $DIVIDER >> $UVSCAN_REPORT_MIN echo $PART_TOSCAN >> $UVSCAN_REPORT_MIN echo $DIVIDER >> $UVSCAN_REPORT_MIN head -n 10 $REPORT_TMP >> $UVSCAN_REPORT_MIN echo -e $DOTS >> $UVSCAN_REPORT_MIN tail -n 12 $REPORT_TMP >> $UVSCAN_REPORT_MIN echo $DIVIDER >> $UVSCAN_REPORT_MIN grep " Found: " $REPORT_TMP >> $UVSCAN_REPORT_MIN grep " Found: " $REPORT_TMP if [ "$?" = "0" ]; then echo "VIRUS INFECTION FOUND !!!" >> $UVSCAN_REPORT_MIN [ $XDIALOG ] && echo "VIRUS INFECTION FOUND !!!" echo $DIVIDER >> $UVSCAN_REPORT_MIN fi echo >> $UVSCAN_REPORT_MIN rm -f $REPORT_TMP touch $REPORT_TMP [ $XDIALOG ] && echo " done." } ### ------------------------------------------------------------ report_clam() { [ $XDIALOG ] && echo -n "Creating Clam report... " # create report (normal and min) # normal report echo $DIVIDER >> $CLAM_REPORT echo $PART_TOSCAN >> $CLAM_REPORT echo $DIVIDER >> $CLAM_REPORT cat $REPORT_TMP >> $CLAM_REPORT echo $DIVIDER >> $CLAM_REPORT echo >> $CLAM_REPORT # min report echo $DIVIDER >> $CLAM_REPORT_MIN echo $PART_TOSCAN >> $CLAM_REPORT_MIN echo $DIVIDER >> $CLAM_REPORT_MIN head -n 5 $REPORT_TMP >> $CLAM_REPORT_MIN echo -e $DOTS >> $CLAM_REPORT_MIN tail -n 15 $REPORT_TMP >> $CLAM_REPORT_MIN echo $DIVIDER >> $CLAM_REPORT_MIN grep " FOUND$" $REPORT_TMP >> $CLAM_REPORT_MIN grep " FOUND$" $REPORT_TMP if [ "$?" = "0" ]; then echo "VIRUS INFECTION FOUND !!!" >> $CLAM_REPORT_MIN [ $XDIALOG ] && echo "VIRUS INFECTION FOUND !!!" echo $DIVIDER >> $CLAM_REPORT_MIN fi echo >> $CLAM_REPORT_MIN rm -f $REPORT_TMP touch $REPORT_TMP [ $XDIALOG ] && echo " done." } ### ------------------------------------------------------------ show_reports() { ### show report [ $FPROT_ON ] && $DIALOG --title "$TITLE: F-Prot Small Report" \ --textbox $FPROT_REPORT_MIN 0 0 [ $UVSCAN_ON ] && $DIALOG --title "$TITLE: McAfee Small Report" \ --textbox $UVSCAN_REPORT_MIN 0 0 [ $CLAM_ON ] && $DIALOG --title "$TITLE: Clam Small Report" \ --textbox $CLAM_REPORT_MIN 0 0 ### info about report files REPORT_MESSAGE="\nVirus Scan Reports can be found in $REPORT_DIR\n" $DIALOG --title "$TITLE" --no-close --infobox "$REPORT_MESSAGE" 0 0 5 [ $XDIALOG ] && echo -e "$REPORT_MESSAGE" } ### ------------------------------------------------------------ scan() { if [ -z "$PARTS" -a -z "$FILES" ]; then MESSAGE3="Please select partition(s) or directory/file first." $DIALOG --title "$TITLE" --msgbox "$MESSAGE3" 0 0 return fi if [ -z "$SCAN_WITH" ]; then MESSAGE_SORRY="Sorry, either no scan engine selected or available." $DIALOG --title "$TITLE" --msgbox "$MESSAGE_SORRY" 0 0 return fi ### mount partitions TOSCAN="" for i in $PARTS; do mkdir -p /mnt/${i/\/dev\//} # first umount umount $i 2>/dev/null mount -o "ro" $i /mnt/${i/\/dev\//} if [ "$?" != "0" ]; then MESSAGE_UMOUNT="Partiton $i could not be mounted." $DIALOG --title "$TITLE" --msgbox "$MESSAGE_UMOUNT" 0 0 fi TOSCAN="$TOSCAN /mnt/${i/\/dev\//}" done TOSCAN="$TOSCAN $FILES" MESSAGE4="Scanning files on" MESSAGE5="Searching for files, that will be scanned ..." ### define where to report define_report ### watch $REPORT_TMP if [ $XDIALOG ]; then xterm -sb -title "tail -F $REPORT_TMP" -e tail -F $REPORT_TMP & fi ### scan each partition for PART_TOSCAN in $TOSCAN; do [ $XDIALOG ] && echo "Scanning $PART_TOSCAN... " ### scan with FPROT if [ $FPROT_ON ]; then { max=$(find $PART_TOSCAN -type f | wc -l ) echo -e "XXX\nF-Prot: $MESSAGE4: $PART_TOSCAN\nXXX" $FPROT $FPROT_OPT -report=$REPORT_TMP $PART_TOSCAN | grep "^$PART_TOSCAN" | sed 's/->.*//g' | uniq | while read a; do count=$[count+1]; echo $[count*100/max]; done } | $DIALOG --title "$TITLE" --gauge "$MESSAGE5 $PART_TOSCAN" 10 40 report_fprot fi ### scan with UVSCAN (McAfee) if [ $UVSCAN_ON ]; then { max=$(find $PART_TOSCAN | wc -l ) echo -e "XXX\nMcAfee: $MESSAGE4: $PART_TOSCAN\nXXX" $UVSCAN $UVSCAN_OPT $PART_TOSCAN 2>/dev/null | tee $REPORT_TMP 2>/dev/null | grep "^Scanning" | grep -v "\.zip" | grep -v "\.tar" | grep -v ".\tgz" | while read a; do count=$[count+1]; echo $[count*100/max]; done } | $DIALOG --title "$TITLE" --gauge "$MESSAGE5 $PART_TOSCAN" 10 40 report_uvscan fi ### scan clamscan (Clam) if [ $CLAM_ON ]; then { max=$(find $PART_TOSCAN -type f | wc -l ) echo -e "XXX\nClam: $MESSAGE4: $PART_TOSCAN\nXXX" $CLAM $CLAM_OPT $PART_TOSCAN 2>/dev/null | tee $REPORT_TMP 2>/dev/null | grep "^$PART_TOSCAN" | while read a; do count=$[count+1]; echo $[count*100/max]; done } | $DIALOG --title "$TITLE" --gauge "$MESSAGE5 $PART_TOSCAN" 10 40 report_clam fi done ### unmount partitions for i in $PARTS; do umount /mnt/${i/\/dev\//} done ### show reports show_reports } shutdown () { $DIALOG --title "$TITLE" --radiolist "Reboot or shutdown the PC?" 0 0 3 poweroff "" on reboot "" off 2>$TMP ACTION=$(cat $TMP) if [ $ACTION ]; then $ACTION exit 1 fi } online_update () { # remove old temporary dir rm -rf /var/tmp/f-prot if [ -n "$DISPLAY" ]; then xterm -sb -e "$FPROT_CHECKUPDATES; $UVSCAN_CHECKUPDATES; $CLAM_CHECKUPDATES; echo 'Press a key to continue ...'; read -n1" else $FPROT_CHECKUPDATES; $UVSCAN_CHECKUPDATES; $CLAM_CHECKUPDATES; echo 'Press a key to continue ...'; read -n1 fi rm -rf /var/tmp/f-prot } ### ------------------------------------------------------------ ### Main Program ### ------------------------------------------------------------ ### find partitons find_partitions ### print welcome message welcome_message ### menu ### ------------------------------------------------------------ MENU_1="Select partition(s)" MENU_2="(or: Select a directory/file)" MENU_3="Choose Scan Engine(s)" MENU_4="Start Scanning" MENU_5="Do Online-Update" MENU_6="Reboot/Shutdown" MENU_7="Quit" while true; do SCAN_WITH="" [ $FPROT_ON ] && SCAN_WITH=" $FPROT_NAME" [ $UVSCAN_ON ] && SCAN_WITH="$SCAN_WITH $UVSCAN_NAME" [ $CLAM_ON ] && SCAN_WITH="$SCAN_WITH $CLAM_NAME" $DIALOG --title "$TITLE" \ --menu "$MENU_TITLE" 0 0 7\ 1 "$MENU_1"\ 2 "$MENU_2"\ 3 "$MENU_3" \ 4 "$MENU_4 (with$SCAN_WITH)" \ 5 "$MENU_5" \ 6 "$MENU_6" \ 7 "$MENU_7" \ 2> $TMP [ $? -ne 0 ] && break CHOICE=$(cat $TMP) case "$CHOICE" in 1) choose_parts ;; 2) choose_dirfile ;; 3) choose_engine ;; 4) scan ;; 5) online_update ;; 6) shutdown || break ;; 7) break ;; esac done