Scan results for the HTTP client
March 5, 2024
ID 179886
For each scanned file, the sample HTTP client prints a scan result that specifies whether a scanned object is considered uninfected or malicious.
The following scan results are possible:
CLEANScanned object is considered uninfected.
DETECTScanned object is considered malicious. This scan result is followed by the name of the detected object or the type of the detected URL.
Kaspersky Scan Engine detects URLs of the following types:
- Malicious URLs. When such a URL is detected, Kaspersky Scan Engine returns
DETECTMALICIOUS_URL. The priority of this type is 1 (highest priority). - Phishing URLs. When such a URL is detected, Kaspersky Scan Engine returns
DETECTPHISHING_URL. The priority of this type is 2. - Adware URLs. When such a URL is detected, Kaspersky Scan Engine returns
DETECTADWARE_URL. The priority of this type is 3.A URL of this type can only be detected when Cloud Protection is enabled.
- URLs leading to legitimate software that can be used by intruders to damage computers or users' personal data). When such a URL is detected, Kaspersky Scan Engine returns
DETECTRISKWARE_URL. The priority of this type is 4 (lowest priority).A URL of this type can only be detected when Cloud Protection is enabled.
A URL can belong to several types simultaneously. In this case, Kaspersky Scan Engine returns the
DETECTscan result of the highest priority.- Malicious URLs. When such a URL is detected, Kaspersky Scan Engine returns
DISINFECTEDScanned object has been successfully disinfected.
DELETEDScanned object was deleted.
If the scanned object contains macros, the scan result of this file is appended with "AND CONTAINS OFFICE MACRO".
Below is an example of the output produced by the sample HTTP client:
./kavhttp_client test.sh service.sh eicar.txt Server address: /tmp/.kavhttpd Network timeout: 2000 Scan mode: scanmemory Scan file: test.sh CLEAN Scan file: service.sh CLEAN Scan file: eicar.txt DETECT EICAR-Test-File |
If the scanning operation failed, the scan result will contain one of the following error codes:
NON_SCANNEDSpecified object was not scanned. The reason for it is provided as well.
SERVER_ERRORAn error occurred in Kaspersky Scan Engine.
CONNECTION_CLOSEDConnection was closed by Kaspersky Scan Engine.
CLIENT_TIMEOUTOperation timed out. This happens when the client timeout is exceeded.
CONNECTION_FAILEDFailed to establish a connection to Kaspersky Scan Engine.
HTTP_ERRORThe server has responded with an HTTP status code that is not equal to
200. The HTTP status code and its description are provided as well.
