Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [clamav]

The tag has no usage guidance.

1
vote
1answer
2k views

How to use ClamAV to scan the memory

How can I only scan the computer RAM for viruses using the ClamAV command clamscan? I already tried, because I found it on ClamWin forum: clamscan --memory But it seems, that the Linux version does ...
0
votes
1answer
794 views

clamd.sock permisson denied

Clamav is running as clamscan user But I get a permisson denied error: Apr 6 20:23:48 nais2 clamsmtpd: 100003: CLAMAV: couldn't connect to: /var/run/clamd.scan/clamd.sock: Permission denied But: ...
1
vote
1answer
898 views

ClamAV: suppress all output except summary

When using Clam AntiVirus from within GNU Bash, how should one invoke clamscan such that it will reliably suppress all output except the final summary? These attempts don't work: clamscan --quiet. ...
0
votes
1answer
922 views

ClamAV Freshclam won't update and there is no freshclam.log file?

If I run 'sudo freshclam' I get this error: ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/...
0
votes
0answers
8 views

Freshclam can't pull updates from Azure Storage blob

I have a public storage blob I host ClamAV definitions updates on - there is no access key required as it's public access. I can download the updates just fine through wget and chrome, however I get ...
-1
votes
1answer
52 views

my server will damage if i delete this infected files?

some spam scripts in my server (it send thousands of mails/hr) i did scan to my server CentOS7 + Virtualmin using clamav , and this is the reuslts : /home/joudakpk/homes/info/Maildir/cur/1555410522....
0
votes
1answer
35 views

Is there a list of Error and Warning messages returned by clamscan?

I am writing a Java wrapper around a system call to the clamscan executable. I've been trying to find a list of Error and Warning messages given by clamscan without success. For example, I've seen ...
1
vote
1answer
91 views

Using clamav efficiently when timeshift snapshots are present

I am searching for a simple way to perform a full system scan using clamav on a machine that also has Timeshift based snapshooting enabled. As suggested by this answer on the Ubuntu site, I was using ...
0
votes
1answer
32 views

Where is clamav cron?

My clamav runs at the same time every day. But I can't for the life of me figure out where it's configured. Freshclam runs once in the crontab. Does that trigger clamscan to run? Is it just always on? ...
5
votes
1answer
4k views

How to exclude .jpg, .jpeg, .png, .gif from a ClamAV Scan (clamscan)

I'm running a clamscan command to scan my users home directories, I'd like to exclude images from the scan as these sites specifically have thousands of images.
2
votes
2answers
2k views

Something is renaming php files to .php.suspected; I'm trying to find out what

Related: https://serverfault.com/questions/748417/something-renames-files-to-filename-ext-suspected https://stackoverflow.com/questions/32835796/php-file-automatically-renamed-to-php-suspected I ...
3
votes
1answer
428 views

Permission problems for postfix to connect to clamav-milter socket

I am running postfix postfix-3.3.1_1,1 and clamav-milter clamav-milter-0.100.1_1 on FreeBSD 11.2. Postfix and the milter are set to communicate via a socket. I am not able to get the milter and ...
1
vote
1answer
61 views

Clam Antivirus auto scan on certain time on Linux?

I required to know from experts, how can we run Clam Antivirus (https://www.clamav.net/) and auto scan at a certain time on a Linux machine. I don't know how this will be done, I need to create a ...
1
vote
1answer
96 views

Cron Daemon - LibClamAV errors

I have been receiving since a long time following mails: From: Cron Daemon <root@autisticstory.net> Subject: Cron <root@cloud-vps> test -x /usr/sbin/anacron || ( cd / && run-parts ...
1
vote
1answer
96 views

SELinux denied clamscan to delete uploaded file on nginx server

On my nginx server, the uploaded files context are set as: -rw-rw-r--. nginx nginx system_u:object_r:httpd_sys_rw_content_t:s0 eicar.sh.pdf Right after upload, clamscan runs to verify the file using ...
2
votes
0answers
621 views

ClamAV on CentOS 7 - scan.conf or clamd.conf

I've just tried to configure ClamAv on a CentOS 7 set-up. I managed to get it to work albeit with a rodeo-trick. I would like to know why there are two differently named configuration files within ...
0
votes
0answers
53 views

ClamAV Antivirus on C

I've installed Clam AV in my server, and I've programmed a scan for last nigth with crontab suing the following command: clamscan -r --bell -i / > /var/log/clamavscans.log The result was that I ...
1
vote
0answers
254 views

Trigger event on host OS from inside a Docker container web app

I have a host OS (Ubuntu) with ClamAV installed. and I am running a Docker container on this OS. This container is running a node web app that is publicly facing. There is file upload functionality ...
0
votes
1answer
21 views

re-installing group of programs on a new pc or virtual machine

OS:OpenSuSE 42.3 64 bit I have spent a long time configuring a mail server, and I would like to bundle it up in some way so I can easily re-deploy it if the host needs to be re-installed. For ...
1
vote
0answers
490 views

Selinux is blocking clamd to open new ports for each Thread

SElinux Enforced on CentOS7 is blocking again clamAV on scanning file operations. Some months ago, I encountered the same issue which I posted here, which at the end I solved doing the following ...
1
vote
0answers
825 views

Clamav configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function

I faced the below error when I installed the latest ClamAV AnitVirus (clamav-0.99.2) : configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function Details from Logs : ...
0
votes
1answer
287 views

Selinux - Looking for some policy that is blocking clamd to open new ports for each Thread

Trying to keep SElinux Enforced on CentOS and allowing clamAV to scan files. But it seems that SElinux does not like the following behavior of clamd: Clamd is listening on a predefined TCP port ...
0
votes
1answer
47 views

amavis: [virus_name_to_spam_score] is empty when using certain clam database

I have a weird behavior regarding virus_name_to_spam_score. I’m using 2 custom Clamav DB. Here are the logs when using SaneSecurity where we can see that everything is working fine: Jun 12 10:57:53 ...
0
votes
0answers
68 views

Understanding upgrade script for clamAv + Setting up sync between 2 servers via SFTP

I have setup ClamAV in my client systems. Unfortunately, all our ports are protected and blocked and we have access to only 2 ports in total. Port 1: From this port, we will able to execute Linux ...
1
vote
1answer
1k views

Clamav TCP 3310 setup Debian

I've run into this problem which is weird. I'm using Debian jessie and I have setup clamav to listen also on port 3310 with the TCPSocket 3310 option. After saving the changes to the config file I ...
0
votes
2answers
289 views

Maldetect + clamAV does not recognise base64 hidden malware

I am assigned to do daily malware scans on our Wordpress website to make sure everything is going right. Therefor I have installed Maldetect 1.5 and ClamAV. As I wanted to know if everything is ...
0
votes
1answer
299 views

Bash script not working in crontab

I'm trying to make a Bash-script which checks if I've downloaded anything, and if I have it should scan that. I'm making it launch at startup using crontab, however that part doesn't work. This is my ...
1
vote
1answer
380 views

ClamAV antivirus, too big log files

I am working with Debian. And there installed ClamAV antivirus. My problem is that logs of antivirus takes almost all disk space (25 gb from 30 gb) Could I just delete these logs files? And is there ...
2
votes
1answer
100 views

How to set ClamAV for manual-only work in Linux (no automatic cron tasks)

The reason I ask this is to save resources. I try to save automated cron tasks wherever I can. Say one installs CalmAV in an Ubuntu based, Apache server, via the command: apt-get update # apt-get ...
3
votes
1answer
208 views

How to find out which particular e-mail in Thunderbird/Icedove that contains malware Doc.Dropper.Agent-1552723 pointed out by Clamscan?

Today I ran a clamscan -ri / and got some positives for some malware. Most are in the "spam" folder, so that's no problem. But one is among my saved e-mails: /home/user/.icedove/bfa059u1.default/...
3
votes
1answer
10k views

Warnings/Errors when running clamav/clamscan, scanning 3TB hard-drive

What I'm trying to do: I'm trying to scan my File-Server for malware, and I'm using clamav/clamscan, where the man page say's it can scan files up to 4GB. This man page states: --max-filesize=#n ...
1
vote
1answer
690 views

ClamAV check infected file

I ran clamscan --bell -r / and in the end it returned me Infected files: 1 now is there any way to check which file is infected (i.e. a log file)?
1
vote
2answers
252 views

ClamAV installation Ubuntu

I am trying to install ClamAV in ubuntu as per the instructions in blog.dutchcoders.io/installing-clamav-from-source/ While updating the virus databases using sudo freshclam -v I am getting ...
1
vote
2answers
3k views

E: Package 'clamav' has no installation candidate?

I am trying to install clamav in kali for removal of viruses in PC and USB.and I did: root@kali:~# apt-get install clamav Reading package lists... Done Building dependency tree Reading state ...
2
votes
1answer
695 views

Exploit FOUND with clamav on Fedora 21 in Oracle's java

I'm scanning one of my systems with Clamav like this: $ clamscan -r -i --remove --max-filesize=4000M --max-scansize=4000M \ --exclude=/proc --exclude=/sys --exclude=/dev --bytecode-timeout=...
2
votes
1answer
6k views

removing clamav with purge leaves database

I uninstalled clamav with apt-get remove --purge clamav but still I have this 100MB folder: du -shc /var/lib/clamav Why is this not deleted on purge? And how can I find out if some other installed ...