Virus Checking on File Upload

[Mark Kovalcson]

Does anyone have a suggestion for a good tool that could interface with the file upload to virus check the files being uploaded?

[Bob]

We are using kendo upload and looking for a good way to check for viruses if anyone has any suggestion. We currently are in test and we are reading the bytes and storing them in sql database but wanted to see if anyone has a nuget package they would recommend or a different approach. I'm thinking of storing them in a temp folder and having our virus scanner scan them on server and if all is good saving into database but still in planning phase. any suggestions or recommendations is appreciated. 

 

thank you

Bob

[Ivan]

Hello Mark,


Thank you for the interesting question.

Till now we are not aware with the anti-virus solution for Silverlight. However we would like to share with you where to interact with RadUpload process.

1. Client side.
   You can check all the selected files immediately after their selection. Handle the FilesSelected event and check for viruses. Once again we are informing you that we are not aware of a related tool/library/control.
2. Server side.
   We suggest that you can upload files in a temporary folder and after the final piece is uploaded you can start an external application (on the server) to check the file. If the virus-scan is OK then you (the upload handler) can safely copy file to the original target-folder.

We hope this information will help you to get your task accomplished.

All the best,
Ivan
the Telerik team

Instantly find answers to your questions on the new Telerik Support Portal.
Watch a video on how to optimize your support resource searches and check out more tips on the blogs.

[Mark Kovalcson]

I assumed that the solution would be server side.

The only product that I have found so far was this 3rd party SDK that uses a number of Anti-virus engines.

http://opswat.com/products/metascan/metascan-package-options

It amazes me that there are not more options out there. I would still be interested if anyone knows, ideally first hand, about any other Anti-virus SDK's  that I could call server side that could read a buffer vs. having to write to the hard drive which I do not want to do.

This one at least has C# support and will read the buffer before it is commited to a database or file system. Still I hate not having options.

Thanks for the response.  Any others would also be appreciated.

[Gretta Arming]

New version Anti-Virus AGV
Publisher's Description:

With this free distribution version of the popular AVG Anti-Virus system, you will get a reliable tool for your computer protection against computer viruses.

Features:

    * Automatic update functionality
    * The AVG Resident Shield, which provides real-time protection as files are opened and programs are run
    * The AVG E-mail Scanner, which protects your e-mail
    * The AVG On-Demand Scanner, which allows the user to perform scheduled and manual tests
    * Free Virus Database Updates for the lifetime of the product
    * AVG Virus Vault for safe handling of infected files
    * Great customer satisfaction!

Please note that any previous version of AVG Free will be un-installed automatically during the installation of the new AVG Free.

Download Antivirus AVG

[Ivan]

Hello Gretta,

Thank you for sharing your information.

It will be very nice if your anti-virus provides an API accessible from a .net application - in our case it is a bit restricted asp.net handler.


All the best,
Ivan
the Telerik team

Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.

[Thomas]

I think that you have to scan the file before uplaoding at the client side.
Use kaspersky pure tool to scan the file before upload.
It is good to have a good Virus Removal software in the system that provide real time protection against virus.

[Ana]

Hello,

I am using RadEditor and enabled the ImageManager and Documentmanager to upload files. I would like to know if with the latest Telerik package there is still no integrated solution to scan files before uploading them to the server.

Thank you.

[Tina Stancheva]

Hi Ana,

Unfortunately we don't have an integrated solution for scanning the files. You'll have to customize your solution to scan the files with an antivirus software.

Kind regards,
Tina Stancheva
the Telerik team

[Jyoti]

Hi Tina,
I am using Kendo UI File Upload(MVC) to upload files and using HttpPostedFileBase and converting into binary(byte[])data to store into a SQL Server table. Is there any solution yet integrated or can be called with this control to scan files(pdf, jpg etc) ? Secondly, please advice if we should scan before doing InputStream.Read or after ? Any suggestions to achive this objective would be helpful. Thanks, would appreciate your quick response.

[Dimo]

Hi Jyoti,

The Kendo UI Upload does not include any file scanning capabilities and frankly speaking, we have no intentions with this regard for the time being. You can scan files via custom implementation or a tool after saving them on the server, in the same fashion as you would do that with a plain <input type="file" /> element.

Regards,
Dimo
Telerik