How to scan virus for Upload docs using Window defender C#

Question

I want to scan the uploaded document using c#. Currently, I'm using window defender in my Machine

Amit Mohanty · Answer

Hey use like this Process process = new Process(); var fileInfo = new FileInfo(@ "C:\Users\Amit\Downloads\Sep-2019.pdf" ); var processStartInfo = new ProcessStartInfo( "C:/Program Files/Windows Defender/MpCmdRun.exe" ) { Arguments = $ "-Scan -ScanType 3 -File \"{fileInfo.FullName}\" -DisableRemediation" , CreateNoWindow = true , ErrorDialog = false , WindowStyle = ProcessWindowStyle.Hidden, UseShellExecute = false }; process.StartInfo = processStartInfo; process.Start(); process.WaitForExit(); if (process.ExitCode == 0) //if it doesn't exist virus ,it returns 0 ,if not ,it returns 1 { // file good, no issue. }

Amit Mohanty · Answer

Hey, try this. using System.Diagnostics; using System.IO; using System.ComponentModel; namespace MyConsoleApp { public interface IScanner { /// /// Scan a single file /// /// The file to scan /// The maximum time in milliseconds to take for this scan /// The scan result ScanResult Scan( string file, int timeoutInMs = 30000); } /// /// Result of the scan /// public enum ScanResult { /// /// No threat was found /// [Description( "No threat found" )] NoThreatFound, /// /// A threat was found /// [Description( "Threat found" )] ThreatFound, /// /// File not found /// [Description( "The file could not be found" )] FileNotFound, /// /// The scan timed out /// [Description( "Timeout" )] Timeout, /// /// An error occured while scanning /// [Description( "Error" )] Error } class WindowsDefenderScanner : IScanner { private readonly string mpcmdrunLocation; /// /// Creates a new Windows defender scanner /// /// The location of the mpcmdrun.exe file e.g. C:\Program Files\Windows Defender\MpCmdRun.exe public WindowsDefenderScanner( string mpcmdrunLocation) { if (!File.Exists(mpcmdrunLocation)) { throw new FileNotFoundException(); } this .mpcmdrunLocation = new FileInfo(mpcmdrunLocation).FullName; } /// /// Scan a single file /// /// The file to scan /// The maximum time in milliseconds to take for this scan /// The scan result public ScanResult Scan( string file, int timeoutInMs = 30000) { if (!File.Exists(file)) { return ScanResult.FileNotFound; } var fileInfo = new FileInfo(file); var process = new Process(); var startInfo = new ProcessStartInfo( this .mpcmdrunLocation) { Arguments = $ "-Scan -ScanType 3 -File \"{fileInfo.FullName}\" -DisableRemediation" , CreateNoWindow = true , ErrorDialog = false , WindowStyle = ProcessWindowStyle.Hidden, UseShellExecute = false }; process.StartInfo = startInfo; process.Start(); process.WaitForExit(timeoutInMs); if (!process.HasExited) { process.Kill(); return ScanResult.Timeout; } switch (process.ExitCode) { case 0: return ScanResult.NoThreatFound; case 2: return ScanResult.ThreatFound; default : return ScanResult.Error; } } } } How to use: namespace MyConsoleApp { class Program { static void Main( string [] args) { var exeLocation = @ "C:\Program Files\Windows Defender\MpCmdRun.exe" ; var scanner = new WindowsDefenderScanner(exeLocation); var result = scanner.Scan(@ "C:\virus.txt" ); Console.WriteLine(result); } } } Ref: https://github.com/yolofy/AvScan

p j · Answer

Sure Amit Mohanty, I'll try. Thanks.

p j · Answer

Thanks, Amit and Ashutosh. I tried both methods but always getting Exit code = 2 means thread found. Do you have any idea.?

Ashutosh Gupta · Answer

i used Kingsoft Antivirus; download it from https://kingsoft-antivirus.en.softonic.com/ once it is installed. use the below code to scan. Process p = new Process(); ProcessStartInfo processInfo = new ProcessStartInfo( "C:/Program Files/Kingsoft/Kingsoft Antivirus/kismain.exe" ); //path of Kingsoft Antivirus; processInfo.Arguments= "full file path to scan" ; //which file need to be scanned ; p.StartInfo = processInfo; p.Start(); p.WaitForExit(); if (p.ExitCode == 0) //if it doesn't exist virus ,it returns 0 ,if not ,it returns 1 { // file good, no issue. }

How to scan virus for Upload docs using Window defender C#

Answers (5)