Solved

Clam AV om Debian

Posted on 2012-04-13
2
540 Views
Last Modified: 2013-11-22
Hi;

Setting up ClamAV on a debian server. I wonder how to configure which action it takes when finding a virus infected file. I can't see anything in clamd.conf relating to this.

As we are running a hosting server I do not want it to erase any files without having checked it first.

Thanks for any suggestions
0
Comment
Question by:thosvd
2 Comments
 
LVL 21

Accepted Solution

by:
robocat earned 50 total points
ID: 37871658
ClamAV is not an on-access scanner comparable to a Virus scanner on a Windows system.

It provides a daemon process that can be integrated with other software, e.g. an e-mail server. ClamAV  will only indicate if the data contains a virus, it's up to the other software to decide what to do. In the case of the e-mail server, it could decide to drop the e-mail or strip the infected attachment.

You can do a file system scan with the "clamscan" CLI command. This has several options to decide what do to with the infected files:
--remove[=yes/no]
--move=DIRECTORY

The file system scan is a run once thing, which is probably not what you need. I suspect you want to permanently scan all new files ?
0
 

Author Comment

by:thosvd
ID: 37884892
Thank you for reply. Now I feel confident in setting up a recrurring scan.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Change your password...do it now!. Probably the easiest point of access to your account is through guessing your password. If your password is guessable, do change it now. If not for your sake but for everyone else in your friends list. Remember …
PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now