Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for an Antivirus package that is compliant with Windows Server 2008. That's not the hard part. What I need is an API layer on the Antivirus that i can call from managed .net code.

For example: I am developing an Asp.Net (C#) website that allows users to upload files to the web server which the web site resides on. We have full control of the server so there are no security/rights issues on the server. I need to be able to run the antivirus algorithm on the newly uploaded files without (hopefully) shelling out to a command-ilne version of the software.

Does anyone know of such a package?


locked by HopelessN00b Jan 14 '15 at 10:50

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by HopelessN00b Jan 14 '15 at 10:50

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Well most 2008-compatible antivirus solutions already have a real-time file system scanner, so I don't see the point. Forgive me for being blunt. – user3914 Oct 19 '09 at 7:12
lol - because if you want to scan only certain files not every file or exit the supported configuration of xyz antivirus then you need an API. Forgive my late reply and for laughing at your statement. – Dave Jellison Mar 9 '11 at 18:22
up vote 0 down vote accepted

Any particular reason why shelling out to run an on-demand scan is a bad thing (aside from the additional resource usage of the command prompt)? Return code management?

Many AV solutions will only do a shallow-depth scan during real-time scanning, but perform a full-depth inspection for an on-demand scan.

I appologize. I had asked this question in StackOverflow as well and didn't even notice the replies here. This is what I ended up doing as I recall. An API would have been nice to scan files that match this regular expression and ignore other files but I ended up doing the same thing via shelling... e.g. if (match) ShellExecute(specificFile). – Dave Jellison Mar 9 '11 at 18:25

As far as I know, Microsoft Forefront Endpoint Protection is fully supported for Windows Server 2008 and also Windows Server 2008 R2: Microsoft Forefront Endpoint Protection 2010

There are not much antivirus vendors who allow you to run managed .net code against, as far as I know.I think you need to reverse engineer the antivirus application to able to do that. But I'm more an sysadmin that an developer, so I could be wrong in this case ;).


Why don't you just use one of the many AVs that does realtime scanning and has a centralized reporting component? Honestly, anything worth looking at has what you are looking for and doesn't require you to roll your own .net solution.


Not the answer you're looking for? Browse other questions tagged or ask your own question.