Antivirus for UNIX-like systems primarily for mailserver integration.
-1
votes
1answer
17 views
Using CLAMAV how to scan only a file spec at a time [closed]
Using CLAMAV
how to scan only a file spec at a time
for example.
scan only -> abc*.ppt
or scan only *.scr
or scan *.exe and *.com at the same time
0
votes
0answers
69 views
Postfix address resolver failure & loopback to root
Ubuntu Linux 12.04.1 With LAMP stack.
The goal is to setup a web server that can send mail via the PHP mail() function, which uses localhost. The mail must then be relayed to an ISP domain ...
1
vote
1answer
19 views
Mod_security2 and clamav to catch malicious files on upload
Is there a clear documentation to describe the solution?
It's very common and also necessary.
0
votes
1answer
34 views
how to achieve clamav quarantine folder address?
I cannot find the quarantine folder in the configuration.
I want to restore some files from quarantine after I have executed clamscan some times.
How should I find the address of the quarantined ...
0
votes
0answers
20 views
Limit clamav to one process
I'm only running on a low memory system so would like to run only one clamd, but i have googled for hours trying to find the answer with no luck. I tried clamscan instead but it takes far too long to ...
0
votes
3answers
80 views
How should I test Clam Anti-Virus?
I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly.
How should I do this in a safe and controlled way?
0
votes
1answer
75 views
How to scan only last 24 hours files with clamav
I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours.
...
0
votes
0answers
77 views
Clam AV fails to start
I've just installed clam av on cent os 6. When I try to start the service clamd it fails and throws this error:
Starting Clam AntiVirus Daemon: /bin/bash: line 1: 14662 Killed clamd
...
0
votes
0answers
63 views
Why does clamav-daemon keep dying?
Repeatedly in my logs:
ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Connection refused
It seems that clamav-daemon keeps dying. Any idea what might cause this to happen? I ...
0
votes
1answer
80 views
Centos5 /tmp/.xzibit Displays multiple viruses in clamav, Can I delete this directory safely? [duplicate]
Possible Duplicate:
How do I deal with a compromised server?
I did a scan on my entire vps finding the folder above with a good amount of viruses. Can I safely delete this folder? Can I ...
0
votes
1answer
59 views
Can LocalSocketGroup be successfully set to a non-default? Error: Failed to change socket ownership
I want to start clamd normally as a root user, and assign the local socket to be used by Qmail-Scanner (only). clamd runs as user/group clamav, qmail-scanner-queue as qscand.
$ id -nG clamav
clamav ...
0
votes
0answers
260 views
How do I run ClamAV on Windows Server efficently? [closed]
I'm hosting a WordPress site on Windows Server 2008 RS, and I want to scan all files that are uploaded by users for viruses using this plugin: http://wordpress.org/extend/plugins/upload-scanner/.
I'm ...
0
votes
0answers
126 views
Clamfs+Samba blocking access when clamd is scanning
I am using Debian 6.0.6. I have installed clamfs, which mounts /var/lib/samba/shared_dir as /clamfs/shared_volume.
That shared_volume is being "shared" to Microsoft Windows clients. Everything is ...
-1
votes
1answer
149 views
Should I use ClamAV?
I installed ClamAV and PHP-ClamAV on my Ubuntu server.
Everything works... But it is extremely slow. Even when I just call basic functions without scanning a file. So it got me wandering if I really ...
1
vote
1answer
393 views
clamd says socket in use by another process but I can't find one
I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get
ERROR: ...
0
votes
1answer
412 views
ClamD server Currently Down
I'm getting this error message after install ClamAV from direcadmin message system.
OS: CentOs 5.
The service 'clamd' on server star.tunahost.net is currently down
This message has been automatically ...
0
votes
0answers
147 views
Running Clamd returns “unrecognized service”
In Ubuntu 11 i installed ClamAV.
I installed using apt-get and i can run clamscan successfully.
But when i try to service clamd start
i get "clamd: unrecognized service" response.
Thanks in ...
0
votes
1answer
52 views
can not load clamav-extension
I try to use the clamav-extension by following these steps.
There weren't any errors, but after restarting apache, no clam-extension is loaded.
php -v
returns no errors.
I've set the extension_dir ...
-1
votes
1answer
95 views
How to detect mail server dangerous load level?
I have a 512 MB VPS running on Debian Squeeze 64bit serving a complete email system (postfix, courier, amavis, clamav, spamassassin, roundcube). All the RAM is always used: max free memory is 10MB, ...
2
votes
6answers
2k views
Websites on Ubuntu 8.04 LTS with Plesk are infected with viruses
I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the ...
1
vote
3answers
465 views
Scan whole system or just user dirs with clamav
I'm in doubt about how to scan my Linux system with Clamav: do I just scan the places where users can upload files (homedirs, their webroots) or do I scan the whole system?
The various sites I've ...
3
votes
1answer
303 views
Quarantined mail retrieval from SpamAssassin/ClamAV/Postfix
We run a mail relay service in a multi tenant deployment for clients. We started doing this because commercially available relay services were silly money when compared to the costs of building one ...
1
vote
1answer
451 views
Setting up ClamAV with Exim and Mailman on Debian Squeeze
I manage a Debian Squeeze server that uses Exim as the MTA and runs several mailing lists using Mailman. I'd like to set up ClamAV to block viruses that may get posted to a list. I'm having trouble ...
5
votes
1answer
310 views
Squid + ClamAV + i-cap: Scanning proxy for uploaded files?
I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented.
Not ...
2
votes
2answers
267 views
Installing ClamAV on Ubuntu
I'd like to install ClamAV on my Ubuntu Servers (LAMP). Is it good to go (as a daemon) out-of-the-box, or does it need some configuration? Do I need to add a line to my crontab to update virus ...
0
votes
0answers
125 views
How to exclude certain emails from AV scan?
I have a small email server set up with CentOS 5.7, Postfix, ClamAV and Amavis-new.
Is it possible to tell ClamAv (or who is responsible) not to scan incoming emails with attached PDF files? Or at ...
0
votes
3answers
2k views
Downloading large files fails, Squid + c-icap + SquidClamAV
I am building a new proxy server with Squid & SquidClamAV.
I am facing problems with downloading large files. I have set a maxsize of 52428800 bytes in squidclamav.conf - which should prevent the ...
1
vote
2answers
343 views
Using ClamAV to virus scan uploaded files on Ubuntu Production Servers
I am planning to use ClamAV to virus scan files being uploaded to a Web Application running on Ubuntu Servers.
ClamAV will be installed on a dedicated server and when the file is being uploaded, the ...
1
vote
0answers
191 views
How do I configure MailScanner to use a remote clamd?
I decided to decrease the workload on my mail gateway by moving anti-virus processing to a separate server. I created the server, installed clamav-daemon on it, and tested it by running clamdscan from ...
0
votes
1answer
85 views
How do I specify clamd's IP address when using clamdscan?
I set up a separate host for clamd to handle virus-scanning, and I want to test it before putting it in production. Now, while MailScanner's configuration for remote clamd is clear and simple, I can't ...
0
votes
1answer
472 views
Changing location of ClamAV logging files
I've run into a weird problem with ClamAV that I have been unable to resolve, due to a incredibly non-informative error message.
I've installed ClamAV via aptitude on an Ubuntu box (ClamAV ...
0
votes
1answer
859 views
iRedMail problem with amavis, clamav and freshclam
I have installed iRedMail on Centos and have problem with starting freshclam (after service freshclam start system says that freshclam is already started but service freshclam status says that ...
0
votes
3answers
1k views
Server super slow, RAM & Swap 100% used, ClamAV problem?
My Ubuntu 10.04 server is down since this morning. When I restart it, I can use it for a couple of minutes then the RAM and Swap get full, and SSH doesn't answer. It seems ClamAV is part of the ...
1
vote
1answer
340 views
clamav using too much resources on lxadmin kloxo
hey there,
I have a VPS with Kloxo panel installed on it.
due toy the lack of ram memory I have to be careful how I use it and since I don't have a shared hosting I don't need the clamav package.
the ...
1
vote
1answer
279 views
Permission problems with Clamfs
been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these.
But I am having permission troubles with a ...
0
votes
1answer
399 views
CLAMAV Issue after i removed it
Here is my issue:
I removed clamav, spamassasin, and amavis and now I am getting this in my Citadel email box every day from some cron job that is searching for Clamav.
How do I amend the Cron job to ...
2
votes
2answers
737 views
Exim4 won't send message
My exim4 don't send any message. The logs says
2011-03-09 15:59:57 1PxKrl-00038i-BT malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1PxKrl-00038i-BT: lstat() failed: Permission ...
0
votes
1answer
280 views
Enable Google Safe Browsing in ClamAV
I'm trying to enable Google Safe Browsing anti phishing/malware filtering on my mail server using ClamAV.
I enabled it in freshclam.conf, and I got a fresh new safebrowsing.cld file in my datadir.
But ...
7
votes
5answers
1k views
Web Server Security Overkill?
I've been doing "extensive" research on securing a linux web server. On top of what is considered the "basics" (removing unused services, hardening ssh, iptables, etc.) is it wise to include ...
0
votes
1answer
1k views
Zimbra, how to turn off spamassasin and clamAV
We are using Zimbra 5.0.18 and I like to know how permanetly disable spamassasin and clamav.
We have ironport so no wories about spam and malware.
1
vote
1answer
308 views
ClamAv takes all cpu on my server when php scripts are run under root directory, even when I do not call clamscan
Hey guys I just finished installing clamAv on my vps that runs Centos. For some reason server interactions slow way down even when I am not calling on ClamAv (clamascan) directly but accessing php ...
0
votes
2answers
2k views
Add Clamd as a service to CentOS?
As I understand I think I need to add something to init.d, but I am not sure what to add. At the moment to start clamav I have to do clamd start. I would like it as a service so I can start it on run ...
2
votes
8answers
875 views
Experience with HAVP
I have employees that have to search sketchy virus-ridden websites as part of their job. They all have XP and Symantec AV installed but they still get hit fairly often.
Rather then trying all sorts ...
0
votes
2answers
539 views
ClamAV eating up all available disk space
Today I found that my Redhat server has run out of hard disk space. The culprit seems to be a program called Clamav that fills /tmp directory with thousands of subfolders with names like ...
3
votes
3answers
3k views
How to upgrade ClamAV on Ubuntu Hardy Heron 8.04 LTS?
I'm running a server on Ubuntu Hardy Heron 8.04 LTS, and when I installed ClamAV via aptitude, it installed version 0.94. That version has now been EOL'ed, but when I run "aptitude upgrade", it ...
0
votes
1answer
246 views
Postfix/ClamAV not stopping viruses under Virtualmin
I am using Virtualmin and have it set up to have Postfix scan incoming emails with ClamAV (using clamdscan) and delete any emails which contain a virus. However when I email myself the EICAR test ...
1
vote
6answers
2k views
Is it safe to disable clamd?
Clamd is taking up about 5% of my memory (2GB) on my dedicated server (running linux) and I'm wondering if I can disable it without any security risks.
The server just hosts a few of my own websites. ...
0
votes
4answers
2k views
How to resolve these errors and install ClamAV for Perl under Ubuntu/Debian?
After successful
apt-get install clamav
I then did:
perl -MCPAN -e shell
install File::Scan::ClamAV
and got
CPAN.pm: Going to build J/JA/JAMTUR/File-Scan-ClamAV-1.91.tar.gz
Cannot find ...
0
votes
1answer
104 views
CLAMAV hangs while reading database
I restart clamav and review logs and see this
Mon Jan 11 11:14:49 2010 -> +++ Started at Mon Jan 11 11:14:49 2010
Mon Jan 11 11:14:49 2010 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, ...
1
vote
1answer
400 views
How to monitor ClamAV?
I have a postfix mailserver with amavis as a content_filter setup successfully an now I wonder how I can monitor if clamav is working properly. The clamav logfile is empty and I can not see any trace ...