FractalizeR: VBulletin Antivirus

[FractalizeR]

What does it do?

It scans every attachment any user uploads to your forum for viruses and allows to execute various actions if any virus is found. Hack requires PHP 5.x. and (depending on driver) PHP AV extensions or some antivirus software installed on PC

Points of interest:


Modular architecture (can be attached to almost any antivirus. Just a few lines of code needed to write a driver) Allows to exclude certain usergroups from check
Allows to exclude certain threats (viruses)
Can autoban user, that uploaded infected attachment
Can send PM notifications about virus to selected usergroups or users. Message text and options to send are customizable.
Can warn user, that uploaded virus by PM about his action. Message text and options to send are customizable.
Can change usergroup of the user, uploaded infected attachment
Can create a post in specific thread or a thread in specific forum with customized text about user and virus he tried to upload
Can execute arbitrary PHP code when the virus is found


How to install?


Unpack archive into forum root
Install *.xml file via Admin Control Panel (Product management)


Driver is bundled for phpLibClamAV extension which uses ClamAV (http://www.clamav.org) antivirus natively from PHP.
Installation instructions and sources are here: http://trickie.org/code/phplibclamav.php

For other antivirus engines you will need to write a driver or at least give me full docs on antivirus you use.

How to update to latest version?

Overwrite all files by new ones from latest zip and reimport product XML file via Admin Control Panel with "Allow Overwrite" option checked.

Version history:
1.0.2

Fixed a problem, where my mod caused error with uploading avatars, photos and pictures printing "Fatal error: Call to a member function initializationPassed() on a non-object in /public_html/includes/class_upload.php(381) : eval()'d code on line 4"


1.0.1

Detailed problem description is now available in case of initialization failure in devdebug combo (enable debug mode on forum to see error message at the very bottom of the attachment adding page in combo)

[Deepdog009]

Groovy Baby...

Keep the ball rolling...>>>FractalizeR<<<

[puertoblack2003]

in admin option to modify setting i cant get pass the usergroup setting everything else is not there.

[FractalizeR]

in admin option to modify setting i cant get pass the usergroup setting everything else is not there.

Sorry, I don't understand. What is wrong?

[Hostboard]

Very nice! Is there a method to test that ClamAV is properly installed/configured and interfacing properly with this?

[puertoblack2003]

Sorry, I don't understand. What is wrong?


this image https://vborg.vbsupport.ru/external/2008/08/63.jpg

if you see where it say the usergroup settings well when i installed it to set it up half the page is missing after usergroup.

[FractalizeR]

I fixed one bug (reuploaded archive) but it related to Windows. Hack requires PHP5. Dependency check added to xml.
Do you have PHP5 on your host?

[FractalizeR]

Very nice! Is there a method to test that ClamAV is properly installed/configured and interfacing properly with this?

After hack installation, enable it in settings and try to upload any attachment. You will have an error, if something is bad and attachment will not be uploaded. To test for viruses download this standard antivirus testfile http://www.eicar.org/download/eicar.com.txt and try to upload it to forum. You will get an error saying, that file contains virus named EICAR-STANDARD-ANTIVIRUS-TEST-FILE or something like this.

[Diesel,]

I enable and try to attach then i get this error.

Parse error: syntax error, unexpected T_VARIABLE, expecting T_FUNCTION in /home/ihaxxnet/public_html/forum/includes/fractalizer_vbav/class_vbav.php on line 47

[Megatr0n]

Does this hack work for Linux servers?

[FractalizeR]

Does this hack work for Linux servers?

Yes. I am using it on Linux server

I enable and try to attach then i get this error.

Parse error: syntax error, unexpected T_VARIABLE, expecting T_FUNCTION in /home/ihaxxnet/public_html/forum/includes/fractalizer_vbav/class_vbav.php on line 47
Do you have PHP5?

[taxick]

Are there a version for windows servers? (To apache)?????????

[FractalizeR]

Are there a version for windows servers? (To apache)?????????

It should work on Windows also.

[taxick]

It should work on Windows also.

But where can i findphpLibClamAV i are windows version???

[Antek]

I uploaded plugin via ftp to my forum and aftet it board is death - I see blank page :( same after delete files, what's going on? :/

[FractalizeR]

But where can i findphpLibClamAV i are windows version???

You can compile it, but I never compiled PHP extensions on Windows.

I uploaded plugin via ftp to my forum and aftet it board is death - I see blank page same after delete files, what's going on? :/ I don't know. Did you overwrite something? Disable all hooks and try to open forum again

[TheInsaneManiac]

My forum members are really good at uploading compressed .rar and .zip, would this scan those as well?

[FractalizeR]

Yes. Clam supports scanning of archives of most formats.

[Hostboard]

I Get this when I try to upload the test file:

Upload Errorseicar.com.txt:
Cannot upload attachments! Antiviral engine initialization failed!


Is this working or ClanAV is not propery installed on my server?

[nesta2006]

The following dependencies were not met:

1. This product is not compatible with version 4.4.7 of PHP. (Compatible starting with 5.0)

[FractalizeR]

I Get this when I try to upload the test file:

Upload Errorseicar.com.txt:
Cannot upload attachments! Antiviral engine initialization failed!


Is this working or ClanAV is not propery installed on my server?

Either ClamAV is not installed, or phpLibClamAV extension is not installed. Or both ;)

2nesta2006:
PHP5 is required.

[yahoooh]

thank u that what i ask before to support in others like hack

thanku very much
installed

[yahoooh]

PHP Parse error: syntax error, unexpected T_VARIABLE, expecting T_FUNCTION in /home/site55/public_html/includes/fractalizer_vbav/class_vbav.php on line 47

[yahoooh]

also is there another version to use system function for those can not installed phplibclamav

[yahoooh]

any help plz?

my server has php 5
but still the error appear
PHP Parse error: syntax error, unexpected T_VARIABLE, expecting T_FUNCTION in /home/site55/public_html/includes/fractalizer_vbav/class_vbav.php on line 47

[FReeSTER]

This a great mod, Thanik you

The problem I have is that it wont let me upload any files. How can I fix this?

[WEBDosser]

tagged

[BANDiT600]

https://vborg.vbsupport.ru/external/2012/01/11.gifTranslations
I know you have russian. Isn't it? ;)

[yahoooh]

my server installed phplibclamav
and has clamav
and php is 5.2.6
vb 3.7
but still error apears when enable this product
PHP Parse error: syntax error, unexpected T_VARIABLE, expecting T_FUNCTION in /home/site55/public_html/includes/fractalizer_vbav/class_vbav.php on line 47

[FractalizeR]

Please reupload files to FTP using binary mode. There is nothing at that line in sources.

[yahoooh]

now :
Cannot upload attachments! Antiviral engine initialization failed

but i install clamav and phplibclamav
how to fix it

[FractalizeR]

Have you configured phpLibClamAV? Path to load AV bases from etc?

[Diesel,]

Yes. I am using it on Linux server


Do you have PHP5?

Yeah.
5.2.6

[FractalizeR]

The following selfTest is executed on AV engine initialization:
public function selfTest() {
//Checking all prerequisites
return (extension_loaded('clamav') and function_exists('clamav_open_db') and function_exists(
'clamav_scan_file') and function_exists('clamav_default_db'));
}

Also, can you enable debug mode and check if there any messages from fr_vbav in devdebug combo (at the very bottom of the page)?

[FractalizeR]

Product updated. In case of antiviral engine initialization failure, a more detailed problem description is available in devdebug combo now (please enable debug mode to see it)

[yahoooh]

installed tested
the error still there:
Cannot upload attachments! Antiviral engine initialization failed!

the message of bottom is: user is super moderator !

[FractalizeR]

Please click on this combo to check for all errors there. "User is super moderator" is only one of a bunch of debug messages sent by VB.

[Spicey LA]

can someone plz install this for me???? huge thanx in advance!

[FractalizeR]

Do you mean installing only addon or installing phplibclamav + addon? The latter will require you to trust your root password to somebody doing installation because extension needs to be compiled and php.ini needs to be altered,

[Spicey LA]

Do you mean installing only addon or installing phplibclamav + addon? The latter will require you to trust your root password to somebody doing installation because extension needs to be compiled and php.ini needs to be altered,

I want someone to install the whole thing includin the other require parts which is needed to make this mod work...

And i can change my password once it is done...

can someone please help me out here? thanx in advance!

[FractalizeR]

Please contact me by PM.

[Spicey LA]

do you want me to send you my ftp and admin login details via pm? i mean does this mean you will install this mod for me???

if so huge thanx in advance and i will message you immeadiately

[FractalizeR]

I will need your server root password to install Clam and PHP extension. If you are willing to trust them to me, then please send me PM with SSH server login details.

[chooky]

I have installed phplib (+php5lib) + clamav but I get only a blank page when I click on attachments :-(

[tiekie]

wont this mod be hard on the server load?

[FractalizeR]

I have installed phplib (+php5lib) + clamav but I get only a blank page when I click on attachments :-(
Check PHP error log.

wont this mod be hard on the server load?
Depending on forum and attachments size. Worth trying.

[laurens800]

http://trickie.org/code/phplibclamav.php does not work :(

[FractalizeR]

Please turn your brains on ;)
http://trickie.org/

[sub_ubi]

This is a mod that should be built in. Any luck on 3.8?

[yahoooh]

dows it work on 3.8.2

[FractalizeR]

It should work.

[huuquynh]

Please turn your brains on ;)
http://trickie.org/

This site is down now. :(

[FractalizeR]

Yes :( Unfortunately, I have no copy on my machine :( Will try to search for one.

[Skyline_GT]

Is it possible that the system adds a note to the post if the scanner finds a virus?

[FractalizeR]

This site is down now. :(

I contacted author and attached the latest version of phplibclamav to modification files.

Is it possible that the system adds a note to the post if the scanner finds a virus?
I am not sure it is possible. At the time attachment is uploaded, post text exist only in user' s browser. It is not yet saved to DB. Also, if a virus is found, attachment is denied.

[ErnestA]

Has anyone confirmed if this works with 3.8.x ??? I don't want to install it if it won't work with 3.8

[yoyoman]

Same question. Does the mod work with v3.8 ?

[FractalizeR]

Yes.

[yahooooh]

i hope to update to vb4 i want to use it on my site , some users upload viruses and i want to prevent them from the begining

[B@legar]

Same to mi, get blank attachments page.

Warning: array_merge() [function.array-merge]: Argument #1 is not an array in [path]/global.php(355) : eval()'d code on line 102

Whats wrong!