Jump to content

kvrt doesn't scan files: Custom Scan for </linux/path> is skipped by FS exclude


Recommended Posts

shibasish
Posted

No matter what type of scans I choose, except for like 992 files somewhere in the /etc/ or /var or something i don't care for right now, no other files are scanned. What's yet more puzzling is that my laptop and desktop pretty much have the same setup and yet.... The whole DBG log file can be found here: https://drive.google.com/file/d/1l4i9dJFiTiNkLkrITRk_HznBMCgbQxjG/view?usp=drive_link


Kvrt doesn't even work on eicar test file (obviously as it excludes any diectory for some reason). I tried this:

~/Temporary$ echo 'X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' > ./eicar.com & sudo ~/bin/kvrt -- -accepteula -silent -dontencrypt -customonly  -trace -tracelevel DBG -custom /home/shibasish/Temporary
[1] 16484
Running with root privileges
Generated directory is </tmp/d8bfa81ebf4e0ac116488>
Verifying archive integrity...  100%   SHA256 checksums are OK. All good.
Uncompressing Kaspersky Virus Removal Tool 24.0.5.0 for Linux  100%  
=================================
Running kvrt with args <-accepteula -silent -dontencrypt -customonly -trace -tracelevel DBG -custom /home/shibasish/Temporary>
=================================
compver: 24.0.5.0 x86-64 (Jul  9 2024 17:36:48)
Product folder </var/opt/KVRT2024_Data>
=================================
Scan is started
=================================
=================================
Scan is finished with results:
    Processed: 0
    Processing errors: 0
    Detected: 0
    Password protected: 0
    Corrupted: 0
=================================
=================================
kvrt exited with code <0>
=================================
[1]+  Done                    echo 'X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' > ./eicar.com


here are some info, which is included in the kvrt log file too:
$ ~/Temporary$ mount | grep -i home 
/dev/mapper/linux--vg-linux--super--root on /home type btrfs (rw,relatime,seclabel,compress=zstd:1,ssd,discard=async,space_cache=v2,autodefrag,subvolid=374,subvol=/@fedora-home)

There is this FS magic info thing in the log file that could be relevant i guess:
INF    vrt: custom: Path </home/shibasish/Temporary> has FS magic <0x9123683e> and <0xeca3c00> blocks
and obviusly this too:
INF    vrt: custom: Custom Scan for </home/shibasish/Temporary> is skipped by FS exclude

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...