Antivirus for UNIX-like systems primarily for mailserver integration.

learn more… | top users | synonyms

1
vote
3answers
573 views

clamav can't find viruses in rar files on centos 6.4

I use ClamAV 0.97.8/17494 on CentOS 6.4. It's good but can't find viruses in rar files. It can detect same virus file as it is or in a zip file but in rar file ClamAV reports no virus. ScanArchive=...
3
votes
1answer
158 views

Process 'clamd' “not monitored”

the output of monit summary says clamav is not monitored. The configuration says: check process clamd with pidfile /var/run/clamav/clamd.pid start program = "/etc/init.d/clamav-daemon start" ...
0
votes
1answer
554 views

Clamdscan scans file in 0 seconds

I have to run clamav on large files. I was wondering which command was the fastest between clamscan and clamdscan. But it seems that clamdscan is not working properly: it scans file larger than 1 GB. ...
0
votes
1answer
4k views

CLAMAV on Centos Mail Server: Can't connect to UNIX socket clamd.sock

In my Centos 6.4 server, I am using Postfix and Dovecot with Amavis/ClamAV filter. Lately I have been trying to solve my spam problem(only occurs in Gmail and Hotmail) so I've been tailing logs. ...
-4
votes
3answers
2k views

Clamav. WARNING: No clamd server appears to be available

I have clamav.log full of these messages, what might be the problem and how to fix this? I have Debian clamav-0.97.6+dfsg-1~squeeze1 spamassassin-3.3.1-1 dovecot-pop3d-1.2.15-7 postfix-2.7.1-1+...
0
votes
4answers
4k views

Server super slow, RAM & Swap 100% used, ClamAV problem?

My Ubuntu 10.04 server is down since this morning. When I restart it, I can use it for a couple of minutes then the RAM and Swap get full, and SSH doesn't answer. It seems ClamAV is part of the ...
1
vote
1answer
1k views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
5
votes
3answers
6k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
6
votes
1answer
870 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
0
votes
1answer
247 views

Centos5 /tmp/.xzibit Displays multiple viruses in clamav, Can I delete this directory safely? [duplicate]

Possible Duplicate: How do I deal with a compromised server? I did a scan on my entire vps finding the folder above with a good amount of viruses. Can I safely delete this folder? Can I ...
1
vote
1answer
2k views

Setting up ClamAV with Exim and Mailman on Debian Squeeze

I manage a Debian Squeeze server that uses Exim as the MTA and runs several mailing lists using Mailman. I'd like to set up ClamAV to block viruses that may get posted to a list. I'm having trouble ...
0
votes
1answer
884 views

Can LocalSocketGroup be successfully set to a non-default? Error: Failed to change socket ownership

I want to start clamd normally as a root user, and assign the local socket to be used by Qmail-Scanner (only). clamd runs as user/group clamav, qmail-scanner-queue as qscand. $ id -nG clamav clamav ...
-2
votes
1answer
1k views

Should I use ClamAV?

I installed ClamAV and PHP-ClamAV on my Ubuntu server. Everything works... But it is extremely slow. Even when I just call basic functions without scanning a file. So it got me wandering if I really ...
1
vote
3answers
2k views

Scan whole system or just user dirs with clamav

I'm in doubt about how to scan my Linux system with Clamav: do I just scan the places where users can upload files (homedirs, their webroots) or do I scan the whole system? The various sites I've ...
1
vote
1answer
4k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: LOCAL:...
0
votes
1answer
232 views

can not load clamav-extension

I try to use the clamav-extension by following these steps. There weren't any errors, but after restarting apache, no clam-extension is loaded. php -v returns no errors. I've set the extension_dir ...
2
votes
6answers
2k views

Websites on Ubuntu 8.04 LTS with Plesk are infected with viruses [duplicate]

I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the ...
-1
votes
1answer
111 views

How to detect mail server dangerous load level?

I have a 512 MB VPS running on Debian Squeeze 64bit serving a complete email system (postfix, courier, amavis, clamav, spamassassin, roundcube). All the RAM is always used: max free memory is 10MB, ...
4
votes
2answers
3k views

Exim4 won't send message

My exim4 don't send any message. The logs says 2011-03-09 15:59:57 1PxKrl-00038i-BT malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1PxKrl-00038i-BT: lstat() failed: Permission ...
3
votes
1answer
2k views

Quarantined mail retrieval from SpamAssassin/ClamAV/Postfix

We run a mail relay service in a multi tenant deployment for clients. We started doing this because commercially available relay services were silly money when compared to the costs of building one ...
2
votes
2answers
397 views

Installing ClamAV on Ubuntu

I'd like to install ClamAV on my Ubuntu Servers (LAMP). Is it good to go (as a daemon) out-of-the-box, or does it need some configuration? Do I need to add a line to my crontab to update virus ...
0
votes
3answers
4k views

Downloading large files fails, Squid + c-icap + SquidClamAV

I am building a new proxy server with Squid & SquidClamAV. I am facing problems with downloading large files. I have set a maxsize of 52428800 bytes in squidclamav.conf - which should prevent the ...
1
vote
2answers
995 views

Using ClamAV to virus scan uploaded files on Ubuntu Production Servers

I am planning to use ClamAV to virus scan files being uploaded to a Web Application running on Ubuntu Servers. ClamAV will be installed on a dedicated server and when the file is being uploaded, the ...
0
votes
1answer
2k views

iRedMail problem with amavis, clamav and freshclam

I have installed iRedMail on Centos and have problem with starting freshclam (after service freshclam start system says that freshclam is already started but service freshclam status says that ...
2
votes
0answers
562 views

How do I configure MailScanner to use a remote clamd?

I decided to decrease the workload on my mail gateway by moving anti-virus processing to a separate server. I created the server, installed clamav-daemon on it, and tested it by running clamdscan from ...
1
vote
1answer
412 views

How do I specify clamd's IP address when using clamdscan?

I set up a separate host for clamd to handle virus-scanning, and I want to test it before putting it in production. Now, while MailScanner's configuration for remote clamd is clear and simple, I can't ...
3
votes
3answers
4k views

How to upgrade ClamAV on Ubuntu Hardy Heron 8.04 LTS?

I'm running a server on Ubuntu Hardy Heron 8.04 LTS, and when I installed ClamAV via aptitude, it installed version 0.94. That version has now been EOL'ed, but when I run "aptitude upgrade", it doesn'...
0
votes
1answer
892 views

CLAMAV Issue after i removed it

Here is my issue: I removed clamav, spamassasin, and amavis and now I am getting this in my Citadel email box every day from some cron job that is searching for Clamav. How do I amend the Cron job to ...
1
vote
1answer
446 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
0
votes
1answer
963 views

Enable Google Safe Browsing in ClamAV

I'm trying to enable Google Safe Browsing anti phishing/malware filtering on my mail server using ClamAV. I enabled it in freshclam.conf, and I got a fresh new safebrowsing.cld file in my datadir. But ...
7
votes
5answers
2k views

Web Server Security Overkill?

I've been doing "extensive" research on securing a linux web server. On top of what is considered the "basics" (removing unused services, hardening ssh, iptables, etc.) is it wise to include anti-...
2
votes
8answers
1k views

Experience with HAVP

I have employees that have to search sketchy virus-ridden websites as part of their job. They all have XP and Symantec AV installed but they still get hit fairly often. Rather then trying all sorts ...
1
vote
1answer
647 views

ClamAv takes all cpu on my server when php scripts are run under root directory, even when I do not call clamscan

Hey guys I just finished installing clamAv on my vps that runs Centos. For some reason server interactions slow way down even when I am not calling on ClamAv (clamascan) directly but accessing php ...
0
votes
4answers
3k views

How to resolve these errors and install ClamAV for Perl under Ubuntu/Debian?

After successful apt-get install clamav I then did: perl -MCPAN -e shell install File::Scan::ClamAV and got CPAN.pm: Going to build J/JA/JAMTUR/File-Scan-ClamAV-1.91.tar.gz Cannot find ...
0
votes
2answers
2k views

Add Clamd as a service to CentOS?

As I understand I think I need to add something to init.d, but I am not sure what to add. At the moment to start clamav I have to do clamd start. I would like it as a service so I can start it on run ...
0
votes
2answers
1k views

ClamAV eating up all available disk space

Today I found that my Redhat server has run out of hard disk space. The culprit seems to be a program called Clamav that fills /tmp directory with thousands of subfolders with names like clamav-...
0
votes
1answer
587 views

Postfix/ClamAV not stopping viruses under Virtualmin

I am using Virtualmin and have it set up to have Postfix scan incoming emails with ClamAV (using clamdscan) and delete any emails which contain a virus. However when I email myself the EICAR test ...
0
votes
1answer
135 views

CLAMAV hangs while reading database

I restart clamav and review logs and see this Mon Jan 11 11:14:49 2010 -> +++ Started at Mon Jan 11 11:14:49 2010 Mon Jan 11 11:14:49 2010 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU:...
1
vote
1answer
680 views

How to monitor ClamAV?

I have a postfix mailserver with amavis as a content_filter setup successfully an now I wonder how I can monitor if clamav is working properly. The clamav logfile is empty and I can not see any trace ...
3
votes
1answer
166 views

System-wide virus scans in Ubuntu?

I installed ClamAV (clamav-daemon and clamav-freshclam) in order to set up a policy of regularly scanning my LTSP thin client setup for Windows viruses. Currently, we have a variety of users, each ...