Antimalware Scan Interface

Overview of the Antimalware Scan Interface technology.

To develop with Antimalware Scan Interface, you need to include this header.

For programming guidance for this technology, see

Enumerations

 
AMSI_ATTRIBUTE

Specifies the types of attributes that can be requested by IAmsiStream::GetAttribute.
AMSI_RESULT

Specifies the types of results returned by scans.

Functions

 
AmsiCloseSession

Close a session that was opened by AmsiOpenSession.
AmsiInitialize

Initialize the AMSI API.
AmsiNotifyOperation

Sends to the antimalware provider a notification of an arbitrary operation. (AmsiNotifyOperation)
AmsiOpenSession

Opens a session within which multiple scan requests can be correlated.
AmsiResultIsMalware

Determines if the result of a scan indicates that the content should be blocked.
AmsiScanBuffer

Scans a buffer-full of content for malware.
AmsiScanString

Scans a string for malware.
AmsiUninitialize

Remove the instance of the AMSI API that was originally opened by AmsiInitialize.
CloseSession

Closes the session. (IAntimalware.CloseSession)
CloseSession

Closes the session. (IAntimalwareProvider.CloseSession)
DisplayName

The name of the antimalware provider to be displayed.
GetAttribute

Returns a requested attribute from the stream.
Notify

Sends to the antimalware product a notification of an arbitrary operation.
Notify

Sends to the antimalware provider a notification of an arbitrary operation. (IAntimalwareProvider2::Notify)
Read

Requests a buffer-full of content to be read.
Scan

Scan a stream of content. (IAntimalware.Scan)
Scan

Scan a stream of content. (IAntimalwareProvider.Scan)

Interfaces

 
IAmsiStream

Represents a stream to be scanned.
IAntimalware

Represents the antimalware product. (IAntimalware)
IAntimalware2

Represents the antimalware product. (IAntimalware2)
IAntimalwareProvider

Represents the provider of the antimalware product. (IAntimalwareProvider)
IAntimalwareProvider2

Represents the provider of the antimalware product. (IAntimalwareProvider2)