Questions tagged [clamav]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

How to use Clamscan to scan for files larger than 4GB

I need to scan files larger than 4GB, I tried the following solutions: 1- I tried to edit the clamd.conf and set the MaxScanSize 100000M MaxFileSize 100000M (Just any arbitrary size that's larger than ...
user avatar
0 votes
0 answers
34 views

Is clam@scan service necessary?

When running systemctl on my CentOS 7 machine, I noticed that the service clamd@scan is failing to run. However, clamd is running fine. I'm unfamiliar with clamAV and I'd like to know if having clamd@...
user avatar
0 votes
2 answers
265 views

Shall I trust this antivirus?

ClamTK shows me this as possible threats: Found 173 possible threats (553458 files scanned). /home/mohamad/.cache/mozilla/firefox/134jnwkg.default-esr78/cache2/entries/...
user avatar
  • 19
3 votes
1 answer
214 views

Clamav - can you only load the linux-specific definitions from /var/lib/clamav/*.cld?

We're investigating applications that seem to use large amounts of memory, one of those being clamav. We noticed that there are lots of av definitions for windows, osx, xls, doc, rtf etc. in /var/lib/...
user avatar
3 votes
1 answer
290 views

ClamAV discovered malware in a Flatpak app - how do I determine which app it is?

During a ClamAV scan, malware was found in the following Flatpak file: /home/daniel/.local/share/flatpak/repo/objects/34/32b76db9f3df9ffb126a55624df56417c367c47d95e3f619585af51e448144.file: BC.Gif....
user avatar
  • 133
1 vote
1 answer
55 views

clamsmtpd won't start with the user specified in clamsmtpd.conf

Since I upgraded my server from Debian Stretch to Debian Buster, clamsmtpd is always running under the clamsmtp user althoug I specified to run under the clamav user in /etc/clamsmtpd.conf file. Here ...
user avatar
0 votes
0 answers
109 views

redirecting daemon logfile to stdout of container process

I have a docker container running an application and one of the processes running on the container is the the clamav daemon clamd. Similarly I'm running the freshclam daemon as well with freshclam -d ...
user avatar
1 vote
1 answer
2k views

clamd: ERROR: LOCAL: Could not create socket directory: /var/run/clamd.scan: Permission denied

For the past 13 days or so (I have a daily job) it seems I'm no longer able to install ClamAV on a clean image of Centos 7. /var/log/messages Sep 16 14:54:52 ip-172-31-42-25 systemd: Starting clamd ...
user avatar
  • 113
0 votes
1 answer
734 views

How to get only stdout_lines with Ansible using mail module

I'm using ansible to scan hosts with clam antivirus and I'm receiving reports via email. Reports contain everything and I want only to receive stdout lines. Is there any way to accomplish this? I ...
user avatar
  • 3
0 votes
0 answers
18 views

The freshclam can't update DB

I am getting error can't connect to port 80 of host db.vn.clamav.net (IP: 2606:4700::6810:da54) when using freshclam. I have pinged to domain db.vn.clamav.net it works fine, I think the reason lies in ...
user avatar
0 votes
0 answers
383 views

Clamd process is slow to scan files of certain file extensions and sizes

I've clamd process running on a Linux Docker container using https://hub.docker.com/r/mkodockx/docker-clamav/ My use case is my service will scan any attachments that a user uploads and return the ...
user avatar
  • 1
0 votes
1 answer
65 views

ClamTK Scan Result Location CentOS 7

I've setup ClamTK on my CentOS 7.9 PC and I wanted to know where the on demand scan results are stored? I couldn't find any references on the developer website nor the Linux man pages. Would anyone ...
user avatar
  • 15
1 vote
1 answer
10k views

Systemd service fails with exit-code 2: Start request repeated too quickly

I created a ClamAV on-access scanning systemd service, to be permanent so that I can enable, start and then leave it, without having to touch it again. I can manually start the service, and it works ...
user avatar
  • 323
0 votes
0 answers
95 views

How to communicate with user from a root process

I have a process that runs as root, from cron.daily, and may need to send results to a logged-in user. Is there anything like an X version of wall or write? I am trying to avoid mail because it may be ...
user avatar
1 vote
1 answer
36 views

ClamAV - installation and automatic updates on OS version which reached its EOL

My server is running on RHEL 6.7 (its life cycle ended on December 31, 2018) Now, I want to install ClamAV but I am wondering whether it is legal to install and run ClamAV on an outdated OS without ...
user avatar
  • 13
0 votes
1 answer
746 views

ClamAV - getcvd: Verification: Can't verify database integrity error message when running freshclam

When I was running freshclam using ClamAV on Zorin Linux OS, it gave me the following errors as shown below. I am new to Linux, so I might need some hand-holding on solving this (step-by-step), if ...
user avatar
0 votes
1 answer
174 views

Show skipped files with ClamAV in Daemon mode

By default, ClamAV ignores files lager than 25M. When I try to scan a big file, 700M, I have this output : ➜ clamscan file.avi ...
user avatar
  • 211
3 votes
2 answers
4k views

Not able to update database in ClamAV with freshclam on CentOS7

I'm running a CentOS freash out of Azure, with ClamAV installed on it, by running the following commands: yum install -y epel-release yum install -y clamav When installed, I'm running the ...
user avatar
  • 83
0 votes
2 answers
2k views

ClamAV - What does the "clamd@scan" service do by default?

I have been researching ClamAV to understand what the "clamd@scan" service does by default in case of finding threats. So far I have not been able to get a satisfactory and clear answer (forums, ...
user avatar
0 votes
1 answer
137 views

Will running MalDet (malware detection) and ClamAV (anti-virus) at the same time cause any issues with the operation of each other?

I am running MalDet (malware detection) and ClamAV (anti-virus) on my RedHat 7.x server and wish to run these processes simultaneously. Other than using CPU resources, can running these two processes ...
user avatar
-1 votes
2 answers
1k views

Is it safe to disable clamscan and clamd services on linux server

We have a dedicated CentOS server with 8 CPUs. We often observe clamscan and clamav taking too much CPU. I have heard experts saying linux doesn't require an antivirus. If that is true, is it safe to ...
user avatar
  • 167
-1 votes
1 answer
1k views

my server will damage if i delete this infected files?

some spam scripts in my server (it send thousands of mails/hr) i did scan to my server CentOS7 + Virtualmin using clamav , and this is the reuslts : /home/joudakpk/homes/info/Maildir/cur/1555410522....
user avatar
1 vote
1 answer
2k views

Is there a list of Error and Warning messages returned by clamscan?

I am writing a Java wrapper around a system call to the clamscan executable. I've been trying to find a list of Error and Warning messages given by clamscan without success. For example, I've seen ...
user avatar
2 votes
1 answer
371 views

Using clamav efficiently when timeshift snapshots are present

I am searching for a simple way to perform a full system scan using clamav on a machine that also has Timeshift based snapshooting enabled. As suggested by this answer on the Ubuntu site, I was using ...
user avatar
  • 123
4 votes
2 answers
2k views

Permission problems for postfix to connect to clamav-milter socket

I am running postfix postfix-3.3.1_1,1 and clamav-milter clamav-milter-0.100.1_1 on FreeBSD 11.2. Postfix and the milter are set to communicate via a socket. I am not able to get the milter and ...
user avatar
  • 41
1 vote
1 answer
215 views

Clam Antivirus auto scan on certain time on Linux?

I required to know from experts, how can we run Clam Antivirus (https://www.clamav.net/) and auto scan at a certain time on a Linux machine. I don't know how this will be done, I need to create a ...
user avatar
  • 113
1 vote
1 answer
398 views

Cron Daemon - LibClamAV errors

I have been receiving since a long time following mails: From: Cron Daemon <root@autisticstory.net> Subject: Cron <root@cloud-vps> test -x /usr/sbin/anacron || ( cd / && run-parts ...
user avatar
0 votes
1 answer
173 views

Where is clamav cron?

My clamav runs at the same time every day. But I can't for the life of me figure out where it's configured. Freshclam runs once in the crontab. Does that trigger clamscan to run? Is it just always on? ...
user avatar
  • 101
1 vote
1 answer
213 views

SELinux denied clamscan to delete uploaded file on nginx server

On my nginx server, the uploaded files context are set as: -rw-rw-r--. nginx nginx system_u:object_r:httpd_sys_rw_content_t:s0 eicar.sh.pdf Right after upload, clamscan runs to verify the file using ...
user avatar
  • 151
0 votes
1 answer
5k views

clamd.sock permisson denied

Clamav is running as clamscan user But I get a permisson denied error: Apr 6 20:23:48 nais2 clamsmtpd: 100003: CLAMAV: couldn't connect to: /var/run/clamd.scan/clamd.sock: Permission denied But: ...
user avatar
2 votes
0 answers
944 views

ClamAV on CentOS 7 - scan.conf or clamd.conf

I've just tried to configure ClamAv on a CentOS 7 set-up. I managed to get it to work albeit with a rodeo-trick. I would like to know why there are two differently named configuration files within ...
user avatar
  • 41
0 votes
0 answers
58 views

ClamAV Antivirus on C

I've installed Clam AV in my server, and I've programmed a scan for last nigth with crontab suing the following command: clamscan -r --bell -i / > /var/log/clamavscans.log The result was that I ...
user avatar
2 votes
0 answers
356 views

Trigger event on host OS from inside a Docker container web app

I have a host OS (Ubuntu) with ClamAV installed. and I am running a Docker container on this OS. This container is running a node web app that is publicly facing. There is file upload functionality ...
user avatar
0 votes
1 answer
24 views

re-installing group of programs on a new pc or virtual machine

OS:OpenSuSE 42.3 64 bit I have spent a long time configuring a mail server, and I would like to bundle it up in some way so I can easily re-deploy it if the host needs to be re-installed. For ...
user avatar
  • 182
1 vote
0 answers
776 views

Selinux is blocking clamd to open new ports for each Thread

SElinux Enforced on CentOS7 is blocking again clamAV on scanning file operations. Some months ago, I encountered the same issue which I posted here, which at the end I solved doing the following ...
user avatar
  • 2,656
1 vote
1 answer
2k views

ClamAV Freshclam won't update and there is no freshclam.log file?

If I run sudo freshclam I get this error: ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/...
user avatar
  • 121
0 votes
1 answer
573 views

Selinux - Looking for some policy that is blocking clamd to open new ports for each Thread

Trying to keep SElinux Enforced on CentOS and allowing clamAV to scan files. But it seems that SElinux does not like the following behavior of clamd: Clamd is listening on a predefined TCP port ...
user avatar
  • 2,656
0 votes
1 answer
95 views

amavis: [virus_name_to_spam_score] is empty when using certain clam database

I have a weird behavior regarding virus_name_to_spam_score. I’m using 2 custom Clamav DB. Here are the logs when using SaneSecurity where we can see that everything is working fine: Jun 12 10:57:53 ...
user avatar
0 votes
0 answers
106 views

Understanding upgrade script for clamAv + Setting up sync between 2 servers via SFTP

I have setup ClamAV in my client systems. Unfortunately, all our ports are protected and blocked and we have access to only 2 ports in total. Port 1: From this port, we will able to execute Linux ...
user avatar
  • 411
2 votes
1 answer
3k views

Clamav TCP 3310 setup Debian

I've run into this problem which is weird. I'm using Debian jessie and I have setup clamav to listen also on port 3310 with the TCPSocket 3310 option. After saving the changes to the config file I ...
user avatar
2 votes
2 answers
4k views

Something is renaming php files to .php.suspected; I'm trying to find out what

Related: https://serverfault.com/questions/748417/something-renames-files-to-filename-ext-suspected https://stackoverflow.com/questions/32835796/php-file-automatically-renamed-to-php-suspected I ...
user avatar
  • 29.1k
0 votes
2 answers
666 views

Maldetect + clamAV does not recognise base64 hidden malware

I am assigned to do daily malware scans on our Wordpress website to make sure everything is going right. Therefor I have installed Maldetect 1.5 and ClamAV. As I wanted to know if everything is ...
user avatar
1 vote
0 answers
1k views

Clamav configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function

I faced the below error when I installed the latest ClamAV AnitVirus (clamav-0.99.2) : configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function Details from Logs : ...
user avatar
0 votes
1 answer
660 views

Bash script not working in crontab

I'm trying to make a Bash-script which checks if I've downloaded anything, and if I have it should scan that. I'm making it launch at startup using crontab, however that part doesn't work. This is my ...
user avatar
  • 137
1 vote
1 answer
933 views

ClamAV antivirus, too big log files

I am working with Debian. And there installed ClamAV antivirus. My problem is that logs of antivirus takes almost all disk space (25 gb from 30 gb) Could I just delete these logs files? And is there ...
user avatar
  • 111
2 votes
1 answer
167 views

How to set ClamAV for manual-only work in Linux (no automatic cron tasks)

The reason I ask this is to save resources. I try to save automated cron tasks wherever I can. Say one installs CalmAV in an Ubuntu based, Apache server, via the command: apt-get update # apt-get ...
user avatar
3 votes
1 answer
259 views

How to find out which particular e-mail in Thunderbird/Icedove that contains malware Doc.Dropper.Agent-1552723 pointed out by Clamscan?

Today I ran a clamscan -ri / and got some positives for some malware. Most are in the "spam" folder, so that's no problem. But one is among my saved e-mails: /home/user/.icedove/bfa059u1.default/...
user avatar
2 votes
1 answer
4k views

How to use ClamAV to scan the memory

How can I only scan the computer RAM for viruses using the ClamAV command clamscan? I already tried, because I found it on ClamWin forum: clamscan --memory But it seems, that the Linux version does ...
user avatar
  • 1,683
1 vote
1 answer
886 views

ClamAV check infected file

I ran clamscan --bell -r / and in the end it returned me Infected files: 1 now is there any way to check which file is infected (i.e. a log file)?
user avatar
1 vote
2 answers
535 views

ClamAV installation Ubuntu

I am trying to install ClamAV in ubuntu as per the instructions in blog.dutchcoders.io/installing-clamav-from-source/ While updating the virus databases using sudo freshclam -v I am getting ...
user avatar