Questions tagged [clamav]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

Not able to update database in ClamAV with freshclam on CentOS7

I'm running a CentOS freash out of Azure, with ClamAV installed on it, by running the following commands: yum install -y epel-release yum install -y clamav When installed, I'm running the ...
0
votes
0answers
20 views

Invalid DNS Reply when Updating ClamAV

I am trying to update ClamAV, but I get an invalid DNS reply. How can I overcome this? Wed Mar 25 02:08:09 2020 -> ClamAV update process started at Wed M Wed Mar 25 02:08:09 2020 -> ^Can't ...
0
votes
2answers
269 views

ClamAV - What does the “clamd@scan” service do by default?

I have been researching ClamAV to understand what the "clamd@scan" service does by default in case of finding threats. So far I have not been able to get a satisfactory and clear answer (forums, ...
0
votes
0answers
22 views

messages in freshclam.log

Recently I found in freshclam.log messages like this: Can't query daily.25671.105.1.0.6810DA54.ping.clamav.net that was occured once per day about 11:30 p.m. Another attempts to update clamav are ...
0
votes
1answer
38 views

Will running MalDet (malware detection) and ClamAV (anti-virus) at the same time cause any issues with the operation of each other?

I am running MalDet (malware detection) and ClamAV (anti-virus) on my RedHat 7.x server and wish to run these processes simultaneously. Other than using CPU resources, can running these two processes ...
0
votes
0answers
22 views

Is there a better clamav CL command to use than the following so that I can scan a usb and so that it runs reasonably fast?

Is there a better CL command to use on Linux than the following so that I can scan a usb and so that it runs reasonably fast? I have had very poor results with clamscan so far; either it has taken ...
-1
votes
2answers
494 views

Is it safe to disable clamscan and clamd services on linux server

We have a dedicated CentOS server with 8 CPUs. We often observe clamscan and clamav taking too much CPU. I have heard experts saying linux doesn't require an antivirus. If that is true, is it safe to ...
-1
votes
1answer
492 views

my server will damage if i delete this infected files?

some spam scripts in my server (it send thousands of mails/hr) i did scan to my server CentOS7 + Virtualmin using clamav , and this is the reuslts : /home/joudakpk/homes/info/Maildir/cur/1555410522....
0
votes
1answer
492 views

Is there a list of Error and Warning messages returned by clamscan?

I am writing a Java wrapper around a system call to the clamscan executable. I've been trying to find a list of Error and Warning messages given by clamscan without success. For example, I've seen ...
1
vote
1answer
159 views

Using clamav efficiently when timeshift snapshots are present

I am searching for a simple way to perform a full system scan using clamav on a machine that also has Timeshift based snapshooting enabled. As suggested by this answer on the Ubuntu site, I was using ...
3
votes
2answers
1k views

Permission problems for postfix to connect to clamav-milter socket

I am running postfix postfix-3.3.1_1,1 and clamav-milter clamav-milter-0.100.1_1 on FreeBSD 11.2. Postfix and the milter are set to communicate via a socket. I am not able to get the milter and ...
1
vote
1answer
86 views

Clam Antivirus auto scan on certain time on Linux?

I required to know from experts, how can we run Clam Antivirus (https://www.clamav.net/) and auto scan at a certain time on a Linux machine. I don't know how this will be done, I need to create a ...
1
vote
1answer
161 views

Cron Daemon - LibClamAV errors

I have been receiving since a long time following mails: From: Cron Daemon <root@autisticstory.net> Subject: Cron <root@cloud-vps> test -x /usr/sbin/anacron || ( cd / && run-parts ...
0
votes
1answer
109 views

Where is clamav cron?

My clamav runs at the same time every day. But I can't for the life of me figure out where it's configured. Freshclam runs once in the crontab. Does that trigger clamscan to run? Is it just always on? ...
1
vote
1answer
129 views

SELinux denied clamscan to delete uploaded file on nginx server

On my nginx server, the uploaded files context are set as: -rw-rw-r--. nginx nginx system_u:object_r:httpd_sys_rw_content_t:s0 eicar.sh.pdf Right after upload, clamscan runs to verify the file using ...
0
votes
1answer
2k views

clamd.sock permisson denied

Clamav is running as clamscan user But I get a permisson denied error: Apr 6 20:23:48 nais2 clamsmtpd: 100003: CLAMAV: couldn't connect to: /var/run/clamd.scan/clamd.sock: Permission denied But: ...
2
votes
0answers
763 views

ClamAV on CentOS 7 - scan.conf or clamd.conf

I've just tried to configure ClamAv on a CentOS 7 set-up. I managed to get it to work albeit with a rodeo-trick. I would like to know why there are two differently named configuration files within ...
0
votes
0answers
56 views

ClamAV Antivirus on C

I've installed Clam AV in my server, and I've programmed a scan for last nigth with crontab suing the following command: clamscan -r --bell -i / > /var/log/clamavscans.log The result was that I ...
1
vote
0answers
303 views

Trigger event on host OS from inside a Docker container web app

I have a host OS (Ubuntu) with ClamAV installed. and I am running a Docker container on this OS. This container is running a node web app that is publicly facing. There is file upload functionality ...
0
votes
1answer
22 views

re-installing group of programs on a new pc or virtual machine

OS:OpenSuSE 42.3 64 bit I have spent a long time configuring a mail server, and I would like to bundle it up in some way so I can easily re-deploy it if the host needs to be re-installed. For ...
1
vote
0answers
586 views

Selinux is blocking clamd to open new ports for each Thread

SElinux Enforced on CentOS7 is blocking again clamAV on scanning file operations. Some months ago, I encountered the same issue which I posted here, which at the end I solved doing the following ...
1
vote
1answer
1k views

ClamAV Freshclam won't update and there is no freshclam.log file?

If I run sudo freshclam I get this error: ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/...
0
votes
1answer
373 views

Selinux - Looking for some policy that is blocking clamd to open new ports for each Thread

Trying to keep SElinux Enforced on CentOS and allowing clamAV to scan files. But it seems that SElinux does not like the following behavior of clamd: Clamd is listening on a predefined TCP port ...
0
votes
1answer
65 views

amavis: [virus_name_to_spam_score] is empty when using certain clam database

I have a weird behavior regarding virus_name_to_spam_score. I’m using 2 custom Clamav DB. Here are the logs when using SaneSecurity where we can see that everything is working fine: Jun 12 10:57:53 ...
0
votes
0answers
91 views

Understanding upgrade script for clamAv + Setting up sync between 2 servers via SFTP

I have setup ClamAV in my client systems. Unfortunately, all our ports are protected and blocked and we have access to only 2 ports in total. Port 1: From this port, we will able to execute Linux ...
2
votes
1answer
2k views

Clamav TCP 3310 setup Debian

I've run into this problem which is weird. I'm using Debian jessie and I have setup clamav to listen also on port 3310 with the TCPSocket 3310 option. After saving the changes to the config file I ...
2
votes
2answers
4k views

Something is renaming php files to .php.suspected; I'm trying to find out what

Related: https://serverfault.com/questions/748417/something-renames-files-to-filename-ext-suspected https://stackoverflow.com/questions/32835796/php-file-automatically-renamed-to-php-suspected I ...
0
votes
2answers
440 views

Maldetect + clamAV does not recognise base64 hidden malware

I am assigned to do daily malware scans on our Wordpress website to make sure everything is going right. Therefor I have installed Maldetect 1.5 and ClamAV. As I wanted to know if everything is ...
1
vote
0answers
1k views

Clamav configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function

I faced the below error when I installed the latest ClamAV AnitVirus (clamav-0.99.2) : configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function Details from Logs : ...
0
votes
1answer
536 views

Bash script not working in crontab

I'm trying to make a Bash-script which checks if I've downloaded anything, and if I have it should scan that. I'm making it launch at startup using crontab, however that part doesn't work. This is my ...
1
vote
1answer
513 views

ClamAV antivirus, too big log files

I am working with Debian. And there installed ClamAV antivirus. My problem is that logs of antivirus takes almost all disk space (25 gb from 30 gb) Could I just delete these logs files? And is there ...
2
votes
1answer
116 views

How to set ClamAV for manual-only work in Linux (no automatic cron tasks)

The reason I ask this is to save resources. I try to save automated cron tasks wherever I can. Say one installs CalmAV in an Ubuntu based, Apache server, via the command: apt-get update # apt-get ...
3
votes
1answer
231 views

How to find out which particular e-mail in Thunderbird/Icedove that contains malware Doc.Dropper.Agent-1552723 pointed out by Clamscan?

Today I ran a clamscan -ri / and got some positives for some malware. Most are in the "spam" folder, so that's no problem. But one is among my saved e-mails: /home/user/.icedove/bfa059u1.default/...
1
vote
1answer
2k views

How to use ClamAV to scan the memory

How can I only scan the computer RAM for viruses using the ClamAV command clamscan? I already tried, because I found it on ClamWin forum: clamscan --memory But it seems, that the Linux version does ...
1
vote
1answer
776 views

ClamAV check infected file

I ran clamscan --bell -r / and in the end it returned me Infected files: 1 now is there any way to check which file is infected (i.e. a log file)?
1
vote
2answers
299 views

ClamAV installation Ubuntu

I am trying to install ClamAV in ubuntu as per the instructions in blog.dutchcoders.io/installing-clamav-from-source/ While updating the virus databases using sudo freshclam -v I am getting ...
1
vote
1answer
1k views

ClamAV: suppress all output except summary

When using Clam AntiVirus from within GNU Bash, how should one invoke clamscan such that it will reliably suppress all output except the final summary? These attempts don't work: clamscan --quiet. ...
1
vote
2answers
3k views

E: Package 'clamav' has no installation candidate?

I am trying to install clamav in kali for removal of viruses in PC and USB.and I did: root@kali:~# apt-get install clamav Reading package lists... Done Building dependency tree Reading state ...
7
votes
1answer
5k views

How to exclude .jpg, .jpeg, .png, .gif from a ClamAV Scan (clamscan)

I'm running a clamscan command to scan my users home directories, I'd like to exclude images from the scan as these sites specifically have thousands of images.
2
votes
1answer
736 views

Exploit FOUND with clamav on Fedora 21 in Oracle's java

I'm scanning one of my systems with Clamav like this: $ clamscan -r -i --remove --max-filesize=4000M --max-scansize=4000M \ --exclude=/proc --exclude=/sys --exclude=/dev --bytecode-timeout=...
5
votes
1answer
13k views

Warnings/Errors when running clamav/clamscan, scanning 3TB hard-drive

What I'm trying to do: I'm trying to scan my File-Server for malware, and I'm using clamav/clamscan, where the man page say's it can scan files up to 4GB. This man page states: --max-filesize=#n ...
2
votes
1answer
7k views

removing clamav with purge leaves database

I uninstalled clamav with apt-get remove --purge clamav but still I have this 100MB folder: du -shc /var/lib/clamav Why is this not deleted on purge? And how can I find out if some other installed ...