Hacked By AnonymousFox
�
��g� � � � d Z ddlZddlZddlZddlZddlmZmZ ddlm Z ddl
m Z ddl m
Z
ddlmZmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d � d
� � ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see <https://www.imunify360.com/legal/eula>
� N)�Malware�MalwareSignatures)� HookEvent)�g)�resource_limits)�AIBOLIT_SCAN_INTENSITY_KEY�MalwareScanResourceType)�MalwareIgnorePath)�MDS_PATH)�MDSDetachedScanDir)�
get_memoryc �" � e Zd Zd� Zd� Zdd�ZdS )�MalwareDatabaseScannerc �h � || _ || _ || _ || _ || _ || _ || _ d S �N)�scan_id� initial_path�paths�
intensity_cpu� intensity_io�
intensity_ram� scan_type) �selfr r r r r r r �_s �U/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/mds/scanner.py�__init__z MalwareDatabaseScanner.__init__* s= � � �� � (�����
� *��� (��� *���"����� c �@ � dt dd| j d dt j dt |j � � d| j dt |j � � d t |j � � d
t j d t | j � � d t t j
� � gS )
Nz/opt/ai-bolit/wrapperz--scanz--pathr z--avdbz
--report-filez
--detachedz
--progressz
--ignore-listz --procudbz--memoryz --db-timeout)r r r �MDS_AI_BOLIT_HOSTER�str� report_filer �
progress_file� ignore_file� MDS_PROCU_DBr
r r �MDS_DB_TIMEOUT)r �work_dirs r �_cmdzMalwareDatabaseScanner._cmd= s� � � #� � � � �J�q�M� � � 1� � ��$� %� %� � �L� � ��&� '� '� � ��$� %� %� � � *� � �t�)� *� *� � ��&� '� '�+
�
r Nc � � K � t | j � � 5 }|j � d� d� t j t j j �� � D � � � � � � | �
|� � }|| j | j d�}|j
� d�� � 5 }t j ||� � d d d � � n # 1 swxY w Y |j � d�� � 5 }|j � d�� � 5 }t' j | j | j | j |pt+ j � � �� � }t, j � |� � � d {V �� t3 j || j | j d||t; |� � t< | j � � � � d {V �� d d d � � n # 1 swxY w Y d d d � � n # 1 swxY w Y d d d � � d S # 1 swxY w Y d S )
N�
c 3 �b K � | ]*}t j t j |� � � � V � �+d S r )�base64� b64encode�os�fsencode)�.0�paths r � <genexpr>z.MalwareDatabaseScanner.scan.<locals>.<genexpr>Y sK � � � � � � � �$�R�[��%6�%6�7�7�� � � � � r )�
resource_type)�cmdr r �w)�mode)r r r0 �startedT)r r �start_new_session�stdout�stderr�cwd�key) r r r# � write_bytes�joinr
� path_listr �DB�valuer' r r �scan_info_file�open�json�dump�log_file�err_filer �MalwareScanningStarted�timer �sink�process_messager �create_subprocessr r r r ) r r6 r& r3 � scan_info�fp�l_f�e_f�scan_started_events r �scanzMalwareDatabaseScanner.scanV s+ � � � �
�� �
-�
-� % �� � � ,� ,��
�
� � � 1� ;�&=�&@�&F�!� !� !�� � � � �
�
�
� �)�)�H�%�%�C�� $� 1� !�^�� �I�
�(�-�-�3�-�7�7�
)�2�� �)�R�(�(�(�
)�
)�
)�
)�
)�
)�
)�
)�
)�
)�
)����
)�
)�
)�
)��"�'�'�� (� � �
��h�'�,�,�#�,�6�6�
�:=�%.�%E� �L� "�n� �*� #� 2�t�y�{�{� &� &� &�"� �f�,�,�-?�@�@�@�@�@�@�@�@�@�%�7��"&�"4�!%�!2�&*� � ��H�
�
�2�4�>�B� � � � � � � � � � �
�
�
�
�
�
�
�
�
�
�
����
�
�
�
�
�
�
�
�
�
�
�
�
�
�
����
�
�
�
�#% � % � % � % � % � % � % � % � % � % � % � % ���� % � % � % � % � % � % s �BG9�1C� G9�C �G9�C � G9�9 G!�B)G
�> G!�
G �G!�G �G!� G9�!G% �%G9�(G% �)G9�9G=� G=r )�__name__�
__module__� __qualname__r r' rQ � r r r r ) sF � � � � � �#� #� #�&
�
�
�2&� &� &� &� &� &r r )�__doc__r+ rC r- rH � defence360agent.contracts.configr r �%defence360agent.contracts.hook_eventsr �&defence360agent.internals.global_scoper �defence360agent.utilsr �imav.malwarelib.configr r �imav.malwarelib.modelr
�imav.malwarelib.scan.mdsr �!imav.malwarelib.scan.mds.detachedr �imav.malwarelib.utilsr
r rU r r �<module>r` s1 ��� �* �
�
�
� � � � � � � � � � � � � G� G� G� G� G� G� G� G� ;� ;� ;� ;� ;� ;� 4� 4� 4� 4� 4� 4� 1� 1� 1� 1� 1� 1�� � � � � � � � 4� 3� 3� 3� 3� 3� -� -� -� -� -� -� @� @� @� @� @� @� ,� ,� ,� ,� ,� ,�S� S� S� S� S� S� S� S� S� Sr
Hacked By AnonymousFox1.0, Coded By AnonymousFox