Antivirus for UNIX-like systems primarily for mailserver integration.

learn more… | top users | synonyms

1
vote
0answers
12 views

Sieve saved EICAR virus to Junk folder but also disregarded in the log

I have setup my own mail server by partially following the guide (series) here The sieve filter rule is: ... truncated ... # Trash messages with improperly formed message IDs if not header :regex ...
0
votes
1answer
30 views

Postfix can not receive mail with error: amavis[15499]: () (!)DENIED ACCESS from IP x.x.x.x, policy bank

My mail server ran very well. But after my setting an OpenConnect VPN on the mail server, I found the server could not receive mails from outside. For example, my host IP is 1.2.3.4 I did tail -f ...
0
votes
0answers
30 views

clamav installation with pcre in Amazon Linux

When we install ClamAV in our Amazon Linux ElasticBeanstalk instance with yum install clamav it gets installed without PCRE support, although the libraries are present in the instance. LibClamAV ...
0
votes
1answer
38 views

Connection refused by AMAVISD-NEW

I found here many information to set a AWS server on my own. I installed the DKIM patch and it's work great, but now I can't send mails. I had already problems sending mails, but now are deeper. Some ...
1
vote
0answers
31 views

Is it possible to check the progress of of a currently running clamAV scan?

I have searched around but not found a possible solution to this so far. I have an ongoing scan which I thought would've been finished by at certain but unfortunately not. So I am wondering if there's ...
1
vote
1answer
59 views

clamav: cannot scan from a file list on Windows?

salt win8 grains.item osfullname win8: ---------- osfullname: Microsoft Windows 8.1 Enterprise Evaluation salt win8 cmd.run shell='powershell' '& "C:\\Program ...
-1
votes
1answer
30 views

CentOS 6 ClamAV scan unexpected results

I am trying to scan whole server with below command using clamav. However I already installed Malware detector. The server scans for upto a minute or two and found some unexpected scanning results ...
3
votes
1answer
144 views

correct order for Postfix milters

I use the following milters with Postfix: ClamAV, OpenDKIM, OpenDMARC, Rspamd This is also the order they are being called via smtpd_milters. What would be the best order for them regarding ...
0
votes
1answer
157 views

How to scan multiple directories with clamav

I know how to scan one directory: clamscan -r /home but for the life of me I cannot seem to get multiple directories working and I cannot seem to Google this simple problem. I have tried: ...
1
vote
1answer
188 views

ClamAV Milter service will not start after updating clamav-milter

I recently updated ClamAV. Here are the packages that were updated: clamav-db-0.99-3.el6.x86_64 clamav-0.99-3.el6.x86_64 clamd-0.99-3.el6.x86_64 clamav-milter-0.99-3.el6.x86_64 ...
7
votes
3answers
3k views

Is there a way to keep ClamAV updated on Debian 8?

Since upgrading to Debian 8 my syslog is full of ...freshclam[17851]: WARNING: Your ClamAV installation is OUTDATED! ...freshclam[17851]: WARNING: Local version: 0.98.7 Recommended version: 0.99 ...
-1
votes
2answers
61 views

Scan only new files whit clamav [duplicate]

I have a cron script witch makes snapshots every day and scan the whole partition whit clamav. But if possible it would bee a better idea to scan only the modified files i think. The snapshot is ...
-1
votes
1answer
47 views

Ubuntu Mysql stop working after outofmemory in a clamscan, mysqld.sock

I'm having daily problems with postman with autentification througth mysql on my Ubuntu14LTS Server. I think the problem arrise after a clamscan scron that breaks in an Out of Memory. In some way ...
-1
votes
1answer
115 views

Clamd cannot start

I am using Centos 6 and clamd (clamav daemon) cannot start: Here is the error message: Starting Clam AntiVirus Daemon: LibClamAV Error: cli_load(): Can't open file /var/clamav/lmd.user.hdb LibClamAV ...
-5
votes
1answer
562 views

Spam and Virus filtering not working with amavis, Spamassasin and ClamAV using Postfix on Ubuntu

I have setup mailserver using Postfix and Dovecot. Sending is receiving mail is working perfectly. This is email server is running from last couple of years without any issue. Recently we started ...
1
vote
1answer
53 views

Gmail (Google Apps) filtering capabilities plus local clamav+spamassassin?

Scenario: My company is going to move all the mail accounts from the current local (and ancient) POP-only provider to gmail, via google apps for work. Current status: Currently we are using a ...
9
votes
2answers
311 views

Is there a way to know why a service is restarted and who did it?

Ubuntu 14.04 clamav 0.98.7 The problem is clamav-daemon is restarted nearly daily: Sep 1 06:30:00 x-master clamd[6778]: Pid file removed. clamd[6778]: --- Stopped at Tue Sep 1 06:30:00 2015 ...
1
vote
0answers
62 views

How do you clamscan a file if it doesnt have an extension in its name? [closed]

I'm trying to use clamscan on linux debian, but it doesn't recognize the files. My files don't have extension. Example: clamscan --max-filesize=10000 ...
1
vote
1answer
326 views

Creating an SELINUX allow rule for sockets error with clamd

I've got a CentOS 7 box configured as a Squid proxy, with clamav and Squidclamav. Normally I would just disable SELINUX, but I am attempting to understand and setup allow rules properly. I've managed ...
0
votes
1answer
89 views

Clamdscan error when launched by apache user “No file descriptor received. ERROR”

We're trying to use clamav on a centos 7 server in order to scan directly files on our web apps (Moodle for example). When trying to execute a clamdscan from apache, we got this error (the file belong ...
2
votes
1answer
170 views

Can I get clamav-daemon to run without first updating with freshclam?

It's painfully slow to run freshclam, but clamav-daemon won't start without it: $ sudo service clamav-daemon start * Clamav signatures not found in /var/lib/clamav * Please retrieve them using ...
1
vote
1answer
936 views

Configuration of ClamAV on Fedora Core 21 with Postfix

I was unable to find any help anywhere on installing Clamav on a modern Fedora system. All the advice out there is old and doesn't apply - so far as I found anyway. And, it's not enough ...
0
votes
2answers
2k views

clamscan using maldet Error: Servname not supported for ai_socktype

So i have installed Linux Malware Detect (maldet) to scan a server and everything went fine with installation but when i run it i get an error. Bunch of errors and than the scan just closes it. Here ...
2
votes
1answer
185 views

Logwatch clam-update warnings

In Debian Linux stable version, there is always lag between current and stable version. Thus one of packages Clamav is very noisy about this, and log files are full of: WARNING: Your ClamAV ...
-2
votes
1answer
691 views

enable fanotify on oracle redhat linux kernel 2.6.39-400

As a newbie in linux environment, I am trying to install clamav daemon, which is clamd, on oracle redhat linux 6 kernel EUK 2.6.39-400. It needs to have fanotify enabled in the kernel. As I see there ...
0
votes
1answer
547 views

Diagnosing an alleged trojan reported by ClamAV [duplicate]

Unfortunately I have very little Linux experience. We have an Amazon instance running Debian 7.6 and got a message from Amazon saying we were port scanning. We have hopefully stopped this by ...
1
vote
1answer
652 views

Clamav milter forward a copy of infected emails

I have a working postfix + clamav installation. How can I configure this to not just quarantene infected emails but if this happens also send a copy of the email to the sysadmins address? What I ...
1
vote
2answers
280 views

Hourly Clamscan cron script failes at reading file list

I've this piece of code located in /etc/cron.hourly/hourlyclamscan. #!/usr/bin/bash # Create Hourly Cron Job With Clamscan # Directories to scan SCAN_DIR=/home/transmission/Downloads # Temporary ...
0
votes
1answer
3k views

run_av (ClamAV-clamd) and ClamAV-clamd av-scanner FAILED - unexpected

I get a strange error when scanning email. Sep 17 15:13:26 mail amavis[616]: (00616-02) (!)run_av (ClamAV-clamd) FAILED - unexpected , ...
0
votes
1answer
3k views

Why doesn't the Clam antivirus daemon start with a Cannot Allocate Memory Error?

/etc/init.d/clamd start Error: [FAILED] log gives ERROR: daemonize() failed: Cannot Allocate Memory On Cent OS total Mem: 510876kb /etc/init.d/clamd start in /var/log/clamav ERROR: ...
5
votes
2answers
9k views

Up to date ClamAV on Debian Wheezy (ClamAV installation is OUTDATED log message)

I've installed ClamAV on Debian Wheezy from the offical repositories, using apt. System is up to date and I don't get any updates via apt-get upgrade, but still I get this message in the logs: Your ...
1
vote
1answer
105 views

Error in amavisd.conf -missing curly or bracket

I'm currently trying to setup Spam and Virus Filtering on my CentOS 6.4 machine using SpamAssassin and ClamAV. I've installed all necessary packages (SA, ClamAV and Amavisd-new) and configured them. ...
2
votes
2answers
2k views

Disable ClamAV for Amavis

I have a Postfix mail server, using Amavis and Spamassassin to check for unwanted e-mails. I have removed ClamAV because it'd basically freeze the whole server every time someone received an e-mail, ...
-1
votes
1answer
39 views

Postfix with Clamd

I've been setting up my own VPS for an e-commerce, as well as a mail server. In order to setup the e-commerce, mysql and apache is running. In order to setup the mail server, I've installed postfix. ...
0
votes
1answer
158 views

Alert Postfix sender when outbound email is not delivered due to amavisd-new checks

I'm running Postfix 2.11 together with amavisd-new which works fine with spamassassin and clamav to prevent inbound/outbound spam and virus traffic. Right now i'm looking for a way to alert users ...
0
votes
1answer
870 views

clamd.amavisd Fails to start on CentOS

I have set up a CentOS cloud server but I am having issues getting clamd amavisd to run, when I call: /etc/init.d/clamd.amavisd start I get the following error: Starting clamd.amavisd: ...
0
votes
0answers
39 views

What accounts does clamav use on different Linux distros

I'm trying to fix a problem in a Chef recipe for installing / configuring ClamAV which is caused by the recipe using the wrong default user/group name for the clam service account on some platforms. ...
3
votes
1answer
142 views

Process 'clamd' “not monitored”

the output of monit summary says clamav is not monitored. The configuration says: check process clamd with pidfile /var/run/clamav/clamd.pid start program = "/etc/init.d/clamav-daemon start" ...
0
votes
1answer
538 views

Clamdscan scans file in 0 seconds

I have to run clamav on large files. I was wondering which command was the fastest between clamscan and clamdscan. But it seems that clamdscan is not working properly: it scans file larger than 1 GB. ...
0
votes
1answer
3k views

CLAMAV on Centos Mail Server: Can't connect to UNIX socket clamd.sock

In my Centos 6.4 server, I am using Postfix and Dovecot with Amavis/ClamAV filter. Lately I have been trying to solve my spam problem(only occurs in Gmail and Hotmail) so I've been tailing logs. ...
0
votes
3answers
4k views

centos 6.4 amavis-new, clamav not function

i install on centos 6.4 amavis-new and clamav /etc/clamd.d/amavisd # cat amavisd.conf # Use system logger. LogSyslog yes # Specify the type of syslog messages - please refer to 'man syslog' # for ...
1
vote
3answers
553 views

clamav can't find viruses in rar files on centos 6.4

I use ClamAV 0.97.8/17494 on CentOS 6.4. It's good but can't find viruses in rar files. It can detect same virus file as it is or in a zip file but in rar file ClamAV reports no virus. ...
0
votes
1answer
307 views

how to change ispconfig clamav log file location [closed]

On ispconfig 3 web interface, log files section under Monitor There are several log files, one of them is Mail Log and other is ClamAV Log. Unfortunately ClamAV log points to same file as Mail Log ...
-4
votes
3answers
2k views

Clamav. WARNING: No clamd server appears to be available

I have clamav.log full of these messages, what might be the problem and how to fix this? I have Debian clamav-0.97.6+dfsg-1~squeeze1 spamassassin-3.3.1-1 dovecot-pop3d-1.2.15-7 ...
1
vote
1answer
1k views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
0
votes
2answers
3k views

Where is ClamAV quarantine folder?

I want to restore some files from quarantine after I have executed clamscan some times. But I cannot find the quarantine folder in the configuration. How should I find the address of the quarantined ...
5
votes
3answers
6k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
0
votes
3answers
2k views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
0
votes
1answer
241 views

Centos5 /tmp/.xzibit Displays multiple viruses in clamav, Can I delete this directory safely? [duplicate]

Possible Duplicate: How do I deal with a compromised server? I did a scan on my entire vps finding the folder above with a good amount of viruses. Can I safely delete this folder? Can I ...
0
votes
1answer
830 views

Can LocalSocketGroup be successfully set to a non-default? Error: Failed to change socket ownership

I want to start clamd normally as a root user, and assign the local socket to be used by Qmail-Scanner (only). clamd runs as user/group clamav, qmail-scanner-queue as qscand. $ id -nG clamav clamav ...