Antivirus for UNIX-like systems primarily for mailserver integration.

learn more… | top users | synonyms

-1
votes
1answer
17 views

Using CLAMAV how to scan only a file spec at a time [closed]

Using CLAMAV how to scan only a file spec at a time for example. scan only -> abc*.ppt or scan only *.scr or scan *.exe and *.com at the same time
0
votes
0answers
69 views

Postfix address resolver failure & loopback to root

Ubuntu Linux 12.04.1 With LAMP stack. The goal is to setup a web server that can send mail via the PHP mail() function, which uses localhost. The mail must then be relayed to an ISP domain ...
1
vote
1answer
19 views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
0
votes
1answer
34 views

how to achieve clamav quarantine folder address?

I cannot find the quarantine folder in the configuration. I want to restore some files from quarantine after I have executed clamscan some times. How should I find the address of the quarantined ...
0
votes
0answers
20 views

Limit clamav to one process

I'm only running on a low memory system so would like to run only one clamd, but i have googled for hours trying to find the answer with no luck. I tried clamscan instead but it takes far too long to ...
0
votes
3answers
80 views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
0
votes
1answer
75 views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
0
votes
0answers
77 views

Clam AV fails to start

I've just installed clam av on cent os 6. When I try to start the service clamd it fails and throws this error: Starting Clam AntiVirus Daemon: /bin/bash: line 1: 14662 Killed clamd ...
0
votes
0answers
63 views

Why does clamav-daemon keep dying?

Repeatedly in my logs: ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Connection refused It seems that clamav-daemon keeps dying. Any idea what might cause this to happen? I ...
0
votes
1answer
80 views

Centos5 /tmp/.xzibit Displays multiple viruses in clamav, Can I delete this directory safely? [duplicate]

Possible Duplicate: How do I deal with a compromised server? I did a scan on my entire vps finding the folder above with a good amount of viruses. Can I safely delete this folder? Can I ...
0
votes
1answer
59 views

Can LocalSocketGroup be successfully set to a non-default? Error: Failed to change socket ownership

I want to start clamd normally as a root user, and assign the local socket to be used by Qmail-Scanner (only). clamd runs as user/group clamav, qmail-scanner-queue as qscand. $ id -nG clamav clamav ...
0
votes
0answers
260 views

How do I run ClamAV on Windows Server efficently? [closed]

I'm hosting a WordPress site on Windows Server 2008 RS, and I want to scan all files that are uploaded by users for viruses using this plugin: http://wordpress.org/extend/plugins/upload-scanner/. I'm ...
0
votes
0answers
126 views

Clamfs+Samba blocking access when clamd is scanning

I am using Debian 6.0.6. I have installed clamfs, which mounts /var/lib/samba/shared_dir as /clamfs/shared_volume. That shared_volume is being "shared" to Microsoft Windows clients. Everything is ...
-1
votes
1answer
149 views

Should I use ClamAV?

I installed ClamAV and PHP-ClamAV on my Ubuntu server. Everything works... But it is extremely slow. Even when I just call basic functions without scanning a file. So it got me wandering if I really ...
1
vote
1answer
393 views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: ...
0
votes
1answer
412 views

ClamD server Currently Down

I'm getting this error message after install ClamAV from direcadmin message system. OS: CentOs 5. The service 'clamd' on server star.tunahost.net is currently down This message has been automatically ...
0
votes
0answers
147 views

Running Clamd returns “unrecognized service”

In Ubuntu 11 i installed ClamAV. I installed using apt-get and i can run clamscan successfully. But when i try to service clamd start i get "clamd: unrecognized service" response. Thanks in ...
0
votes
1answer
52 views

can not load clamav-extension

I try to use the clamav-extension by following these steps. There weren't any errors, but after restarting apache, no clam-extension is loaded. php -v returns no errors. I've set the extension_dir ...
-1
votes
1answer
95 views

How to detect mail server dangerous load level?

I have a 512 MB VPS running on Debian Squeeze 64bit serving a complete email system (postfix, courier, amavis, clamav, spamassassin, roundcube). All the RAM is always used: max free memory is 10MB, ...
2
votes
6answers
2k views

Websites on Ubuntu 8.04 LTS with Plesk are infected with viruses

I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the ...
1
vote
3answers
465 views

Scan whole system or just user dirs with clamav

I'm in doubt about how to scan my Linux system with Clamav: do I just scan the places where users can upload files (homedirs, their webroots) or do I scan the whole system? The various sites I've ...
3
votes
1answer
303 views

Quarantined mail retrieval from SpamAssassin/ClamAV/Postfix

We run a mail relay service in a multi tenant deployment for clients. We started doing this because commercially available relay services were silly money when compared to the costs of building one ...
1
vote
1answer
451 views

Setting up ClamAV with Exim and Mailman on Debian Squeeze

I manage a Debian Squeeze server that uses Exim as the MTA and runs several mailing lists using Mailman. I'd like to set up ClamAV to block viruses that may get posted to a list. I'm having trouble ...
5
votes
1answer
310 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
2
votes
2answers
267 views

Installing ClamAV on Ubuntu

I'd like to install ClamAV on my Ubuntu Servers (LAMP). Is it good to go (as a daemon) out-of-the-box, or does it need some configuration? Do I need to add a line to my crontab to update virus ...
0
votes
0answers
125 views

How to exclude certain emails from AV scan?

I have a small email server set up with CentOS 5.7, Postfix, ClamAV and Amavis-new. Is it possible to tell ClamAv (or who is responsible) not to scan incoming emails with attached PDF files? Or at ...
0
votes
3answers
2k views

Downloading large files fails, Squid + c-icap + SquidClamAV

I am building a new proxy server with Squid & SquidClamAV. I am facing problems with downloading large files. I have set a maxsize of 52428800 bytes in squidclamav.conf - which should prevent the ...
1
vote
2answers
343 views

Using ClamAV to virus scan uploaded files on Ubuntu Production Servers

I am planning to use ClamAV to virus scan files being uploaded to a Web Application running on Ubuntu Servers. ClamAV will be installed on a dedicated server and when the file is being uploaded, the ...
1
vote
0answers
191 views

How do I configure MailScanner to use a remote clamd?

I decided to decrease the workload on my mail gateway by moving anti-virus processing to a separate server. I created the server, installed clamav-daemon on it, and tested it by running clamdscan from ...
0
votes
1answer
85 views

How do I specify clamd's IP address when using clamdscan?

I set up a separate host for clamd to handle virus-scanning, and I want to test it before putting it in production. Now, while MailScanner's configuration for remote clamd is clear and simple, I can't ...
0
votes
1answer
472 views

Changing location of ClamAV logging files

I've run into a weird problem with ClamAV that I have been unable to resolve, due to a incredibly non-informative error message. I've installed ClamAV via aptitude on an Ubuntu box (ClamAV ...
0
votes
1answer
859 views

iRedMail problem with amavis, clamav and freshclam

I have installed iRedMail on Centos and have problem with starting freshclam (after service freshclam start system says that freshclam is already started but service freshclam status says that ...
0
votes
3answers
1k views

Server super slow, RAM & Swap 100% used, ClamAV problem?

My Ubuntu 10.04 server is down since this morning. When I restart it, I can use it for a couple of minutes then the RAM and Swap get full, and SSH doesn't answer. It seems ClamAV is part of the ...
1
vote
1answer
340 views

clamav using too much resources on lxadmin kloxo

hey there, I have a VPS with Kloxo panel installed on it. due toy the lack of ram memory I have to be careful how I use it and since I don't have a shared hosting I don't need the clamav package. the ...
1
vote
1answer
279 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
0
votes
1answer
399 views

CLAMAV Issue after i removed it

Here is my issue: I removed clamav, spamassasin, and amavis and now I am getting this in my Citadel email box every day from some cron job that is searching for Clamav. How do I amend the Cron job to ...
2
votes
2answers
737 views

Exim4 won't send message

My exim4 don't send any message. The logs says 2011-03-09 15:59:57 1PxKrl-00038i-BT malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1PxKrl-00038i-BT: lstat() failed: Permission ...
0
votes
1answer
280 views

Enable Google Safe Browsing in ClamAV

I'm trying to enable Google Safe Browsing anti phishing/malware filtering on my mail server using ClamAV. I enabled it in freshclam.conf, and I got a fresh new safebrowsing.cld file in my datadir. But ...
7
votes
5answers
1k views

Web Server Security Overkill?

I've been doing "extensive" research on securing a linux web server. On top of what is considered the "basics" (removing unused services, hardening ssh, iptables, etc.) is it wise to include ...
0
votes
1answer
1k views

Zimbra, how to turn off spamassasin and clamAV

We are using Zimbra 5.0.18 and I like to know how permanetly disable spamassasin and clamav. We have ironport so no wories about spam and malware.
1
vote
1answer
308 views

ClamAv takes all cpu on my server when php scripts are run under root directory, even when I do not call clamscan

Hey guys I just finished installing clamAv on my vps that runs Centos. For some reason server interactions slow way down even when I am not calling on ClamAv (clamascan) directly but accessing php ...
0
votes
2answers
2k views

Add Clamd as a service to CentOS?

As I understand I think I need to add something to init.d, but I am not sure what to add. At the moment to start clamav I have to do clamd start. I would like it as a service so I can start it on run ...
2
votes
8answers
875 views

Experience with HAVP

I have employees that have to search sketchy virus-ridden websites as part of their job. They all have XP and Symantec AV installed but they still get hit fairly often. Rather then trying all sorts ...
0
votes
2answers
539 views

ClamAV eating up all available disk space

Today I found that my Redhat server has run out of hard disk space. The culprit seems to be a program called Clamav that fills /tmp directory with thousands of subfolders with names like ...
3
votes
3answers
3k views

How to upgrade ClamAV on Ubuntu Hardy Heron 8.04 LTS?

I'm running a server on Ubuntu Hardy Heron 8.04 LTS, and when I installed ClamAV via aptitude, it installed version 0.94. That version has now been EOL'ed, but when I run "aptitude upgrade", it ...
0
votes
1answer
246 views

Postfix/ClamAV not stopping viruses under Virtualmin

I am using Virtualmin and have it set up to have Postfix scan incoming emails with ClamAV (using clamdscan) and delete any emails which contain a virus. However when I email myself the EICAR test ...
1
vote
6answers
2k views

Is it safe to disable clamd?

Clamd is taking up about 5% of my memory (2GB) on my dedicated server (running linux) and I'm wondering if I can disable it without any security risks. The server just hosts a few of my own websites. ...
0
votes
4answers
2k views

How to resolve these errors and install ClamAV for Perl under Ubuntu/Debian?

After successful apt-get install clamav I then did: perl -MCPAN -e shell install File::Scan::ClamAV and got CPAN.pm: Going to build J/JA/JAMTUR/File-Scan-ClamAV-1.91.tar.gz Cannot find ...
0
votes
1answer
104 views

CLAMAV hangs while reading database

I restart clamav and review logs and see this Mon Jan 11 11:14:49 2010 -> +++ Started at Mon Jan 11 11:14:49 2010 Mon Jan 11 11:14:49 2010 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, ...
1
vote
1answer
400 views

How to monitor ClamAV?

I have a postfix mailserver with amavis as a content_filter setup successfully an now I wonder how I can monitor if clamav is working properly. The clamav logfile is empty and I can not see any trace ...

1 2