is there a way to access the SQLite log file programatically?

[stevewa]

Hello,

I searched these forums for phrase" email notifications" and only found something from 2014. 

I found the history.db file, copied it, open it, and it appears to be in SQLIte format.

 

My idea is to be able to write a windows script to query that db, looking for instances of a virus detected, and then send me an email about it.

I haven't tried it yet, just asking to see if the db file is accessible or if it has an authentication gate that prevents reading it's contents?

Thanks

[ritchie58]

Hi stevewa, the history.db files are configured to make it very difficult for other programs to access or read them for security reasons. This is to ensure that a third-party program cannot delete or make alterations to these files. Unfortunately this makes it impossible or extremely difficult at best to access or open these files for review by conventional file reading software.

Also Immunet does not support any user scripted CMD commands at this time.

Regards, Ritchie...

[ritchie58]

There is another possible solution you can explore. Using just the ClamAV antivirus might be the way to go. It is much more configurable than Immunet as far as user scripting is concerned.

Here is a link where you can download the entire ClamAV user's manual in a PDF format. https://github.com/vrtadmin/clamav-faq/raw/master/manual/clamdoc.pdf

Here is the ClamAV home page where you can download the newest stable installer package for your OS, contact the ClamAV team directly and access other documentation data. https://www.clamav.net/downloads

[stevewa]

Thanks Ritchie. I actually installed ClamWin for Windows and have been trying that.

What does Immunet do, that ClamWin does not do, or what is the reason for using Immunet?

I thought it was a windows version for ClamAV, but now I found ClamWin, and that doesn't have the annoying popus of Immunet, and ClamWin has email notifications when a virus is detected.

Any explanation of a benefit of sticking with Immunet would be appreciated.

 

[Guest Wookiee]

Clamav gives you more freedom, for scripting etc.
Immunet collects stats and sends them to a cloud to enhance better detection. Immunet can ALSO use the ClamAV engine.
ClamAV is command-line only. Immunet is not.

[stevewa]

Well, I'm thought I was giving up on ClamWin. it is taking over 8 hours to scan C drive (114GB of data) using 50% of cpu, that's unacceptable.

LOL, then I used Immunet to scan C drive, and sfc.exe is using 99% of cpu.

I guess I'm going back to Microsoft Security Essentials 

 

thanks anyway

[Guest Wookiee]

ClamWin is third party technically. They take clamav and package it up with a UI and edit the package to whatever they like.

ClamAV is from source, and though- is harder to install, doesn't run that high on CPU

 

it is possible ClamWin is going off an OLD version of clamav, when it had  CPU issues-
I wouldn't know.