Author Topic: ashCmd.exe as a AV scaner for MTA - return codes exists?  (Read 2613 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
ashCmd.exe as a AV scaner for MTA - return codes exists?
« on: February 23, 2015, 01:12:11 PM »
Hello,

I'm trying to use Avast Endpoint Security as a AV solution for my incoming/outgoing mail gateways runned on Windows (SmarterMail). I'm not using ashCmd.exe directly from mail server (SmarterMail) but from AV/SPAM solution (Declude - http://declude.com/) which is being used by mail server for various checks (something like SpamAssassin). At the beggining I was trying to use ESET File Server software but ESET licensing model is not very friendly for users which needs to protect file servers so I've started to look more and I've started testing Avast Endpoint Security which has command line util called ashCmd.exe.

Configuration in declude looks something like that:

SCANFILE ...PATH\ashCmd.exe /a /c /t=A /p=1 /_

VIRUSCODE ....

Declude at the end of SCANFILE param adds direct path to mail file (.eml) which should be scanned. Everything is fine except I can't find information if ashCmd util can return direct clean and short information if scanned f ile was infected or not (or cleaned when proper param has been added). ashCmd returns various text informations but I need to have proper numeric return/exit code.

For example ESET util informs that his return codes are:

Exit codes:
  0    no threat found
  1    threat found and cleaned
  10   some files could not be scanned (may be threats)
  50   threat found
  100  error

Is there anything similar with ashCmd.exe?

Thanks

REDACTED

  • Guest
Re: ashCmd.exe as a AV scaner for MTA - return codes exists?
« Reply #1 on: February 23, 2015, 01:21:44 PM »
It looks like ashCmd is returning exit code "1" when virus has been found. Information has been found here:

https://forum.avast.com/index.php?topic=17282.0

but IMHO there should be some information about exit/return code directly in ashCmd.exe file help.