Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [clamav]

Antivirus for UNIX-like systems primarily for mailserver integration.

Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates. The core of the package is an anti-virus engine available in a form of shared library.

  • command-line scanner
  • fast, multi-threaded daemon with support for on-access scanning
  • milter interface for sendmail
  • advanced database updater with support for scripted updates and digital signatures
  • virus scanner C library
  • on-access scanning (Linux® and FreeBSD®)
  • virus database updated multiple times per day (see home page for total number of signatures)
  • built-in support for various archive formats, including Zip, RAR, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others
  • built-in support for almost all mail file formats
  • built-in support for ELF executables and Portable Executable files compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and obfuscated with SUE, Y0da Cryptor and others

Official site: www.clamav.net

158 questions
3
votes
1 answer

Quarantined mail retrieval from SpamAssassin/ClamAV/Postfix

We run a mail relay service in a multi tenant deployment for clients. We started doing this because commercially available relay services were silly money when compared to the costs of building one ourselves. The only thing we have lost in moving to…
SimonJGreen
  • 3,205
  • 5
  • 33
  • 55
3
votes
3 answers

How to upgrade ClamAV on Ubuntu Hardy Heron 8.04 LTS?

I'm running a server on Ubuntu Hardy Heron 8.04 LTS, and when I installed ClamAV via aptitude, it installed version 0.94. That version has now been EOL'ed, but when I run "aptitude upgrade", it doesn't update ClamAV to the more recent version…
Jordan Lev
3
votes
1 answer

Large Virus File with EICAR-Test-Signature not identified by the clamav library

If I add the Eicar Test Signature at the beginning of a large text file, will that file turn out to be malicious? I opened a 5 MB binary file on Sublime Text and added the signatue at the beginning. On scanning with the clamav library, it identified…
Ashish Poddar
  • 51
  • 3
2
votes
1 answer

subprocess installed pre-removal script returned error exit status 5

Trying to get clamav and clamav-daemon uninstalled but seems apt and dpkg are stuck and nothing can complete without this error: dpkg --remove output: (Reading database ... 385080 files and directories currently installed.) Removing clamav-daemon…
eskimo
  • 123
  • 1
  • 3
2
votes
1 answer

Error with clamd amavisd CentOS 7

I am getting issue with clamd and amavisd please see error message below I am running an email server on CentOS 7.3..... amavisd and clamd seems working fine, but they keep jump up with errors every time before I send mails from my email server, and…
WillyBoy
  • 21
  • 1
  • 1
  • 5
2
votes
2 answers

Clamd won't start after update

Since updating clamd to 0.99.2-1.e15 on our RedHat 5 x86_64 system, it has failed to start successfully. The error we get is as follows: LibClamAV Error: cli_pcre_compile: PCRE compilation failed at offset 52: unrecognized character after…
Jamen McGranahan
  • 21
  • 1
  • 2
2
votes
1 answer

mpool_malloc error, cannot access shell

I'm getting spammed the following error on boot: LibClamAC Error: mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net I read that I will need to update... but the problem is this is happening on boot and I keep…
zentenk
  • 223
  • 1
  • 5
  • 10
2
votes
1 answer

ClamAV Milter service will not start after updating clamav-milter

I recently updated ClamAV. Here are the packages that were updated: clamav-db-0.99-3.el6.x86_64 clamav-0.99-3.el6.x86_64 clamd-0.99-3.el6.x86_64 clamav-milter-0.99-3.el6.x86_64 libpng-1.2.49-2.el6_7.x86_64 Now I get this in every three minutes in…
halmeetdave
  • 141
  • 1
  • 4
2
votes
2 answers

Can I get clamav-daemon to run without first updating with freshclam?

It's painfully slow to run freshclam, but clamav-daemon won't start without it: $ sudo service clamav-daemon start * Clamav signatures not found in /var/lib/clamav * Please retrieve them using freshclam * Then run '/etc/init.d/clamav-daemon…
Kit Sunde
  • 946
  • 3
  • 12
  • 33
2
votes
1 answer

Logwatch clam-update warnings

In Debian Linux stable version, there is always lag between current and stable version. Thus one of packages Clamav is very noisy about this, and log files are full of: WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.98.5…
Arunas Bartisius
  • 709
  • 1
  • 7
  • 13
2
votes
1 answer

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: LOCAL: Socket file /var/run/clamav/clamd.sock is in use…
dannix
  • 97
  • 1
  • 1
  • 10
2
votes
6 answers

Websites on Ubuntu 8.04 LTS with Plesk are infected with viruses

I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the infected files which have a pattern of starting with…
Paddington
  • 373
  • 5
  • 17
2
votes
2 answers

Installing ClamAV on Ubuntu

I'd like to install ClamAV on my Ubuntu Servers (LAMP). Is it good to go (as a daemon) out-of-the-box, or does it need some configuration? Do I need to add a line to my crontab to update virus signatures?
Trent Scott
  • 959
  • 1
  • 12
  • 28
2
votes
2 answers

Using ClamAV to virus scan uploaded files on Ubuntu Production Servers

I am planning to use ClamAV to virus scan files being uploaded to a Web Application running on Ubuntu Servers. ClamAV will be installed on a dedicated server and when the file is being uploaded, the bytes will be scanned using the clamMD daemon…
lingostar
  • 31
  • 1
  • 3
2
votes
8 answers

Experience with HAVP

I have employees that have to search sketchy virus-ridden websites as part of their job. They all have XP and Symantec AV installed but they still get hit fairly often. Rather then trying all sorts of desktop level solutions, I was thinking about…
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
1 2
3
…
10 11