From 4be6b958e4a3fa79125bca49fc569dd3a9e5335e Mon Sep 17 00:00:00 2001
From: Michael Boelen <michael.boelen@cisofy.com>
Date: Mon, 13 Mar 2017 15:51:13 +0100
Subject: [PATCH] [MALW-3280] added Avira detection

---
 include/tests_malware | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/include/tests_malware b/include/tests_malware
index cf837bbe..3bdc469b 100644
--- a/include/tests_malware
+++ b/include/tests_malware
@@ -27,6 +27,7 @@
 #################################################################################
 #
     AVAST_DAEMON_RUNNING=0
+    AVIRA_DAEMON_RUNNING=0
     BITDEFENDER_DAEMON_RUNNING=0
     CLAMD_RUNNING=0
     CLAMSCAN_INSTALLED=0
@@ -137,6 +138,19 @@
             Report "malware_scanner[]=avast"
         fi
 
+        # Avira
+        LogText "Test: checking process Avira daemon"
+        IsRunning avqmd
+        if [ ${RUNNING} -eq 1 ]; then
+            FOUND=1
+            Display --indent 2 --text "- ${GEN_CHECKING} Avira daemon" --result "${STATUS_FOUND}" --color GREEN
+            LogText "Result: found Avira security product"
+            AVIRA_DAEMON_RUNNING=1
+            MALWARE_SCANNER_INSTALLED=1
+            AddHP 2 2
+            Report "malware_scanner[]=avira"
+        fi
+
         # Cylance (macOS)
         LogText "Test: checking process CylanceSvc"
         IsRunning CylanceSvc