Super User
Super User

Questions tagged [clamav]

ClamAV is an open source (GPL) antivirus engine designed for detecting Trojans, viruses, malware and other malicious threats.

31 questions
7
votes
2 answers

Use ClamAV to scan large files

We have a Linux VM running Xubuntu with ClamAV installed. We would like to scan files larger than 4Gigs, using the clamscan command preferably. I can use the --max-filesize=x and --max-scansize=x options perfectly. Looking on the clamscan man page,…
Huckleberry Finn
  • 201
6
votes
2 answers

Why ClamAV can't scan some files?

Whenever I try to execute a ClamAV scan on a file in many of my bin directories, it fails with a Can't open file or directory ERROR message. I know it's possible to get ClamdScan to scan the bin directory but I can't figure out how. Any…
TimeHorse
  • 241
6
votes
1 answer

Local ClamAV cannot detect infected file, while VirusTotal can

I have a sample virus file that can be detected by ClamAV on VirusTotal: https://www.virustotal.com/gui/file/6e945381416bac2657acaeccabc8daf04df0c2285ca36333419484ee2120dda4 VirusTotal ClamAV detects that the file is infected with signature:…
taichan
  • 71
3
votes
0 answers

What is CPUQuota PerSec and PerPeriod in systemd?

The manpage for systemd.resource-control says nothing about CPUQuotaPerSecUSec and little about CPUQuotaPeriodUSec. It says nothing either about being set with the value 'infinity', as it is in the clamav* systemd services, as you can see: ._.…
markling
  • 312
3
votes
2 answers

How to hold session with ClamAV daemon?

I'm trying to connect to ClamAV daemon clamd on localhost 3310 port via telnet comand in terminal:telnet 127.0.0.1 3310 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. nIDSESSION [pressed ENTER button on keyboard] nPING …
elgolondrino
  • 133
2
votes
0 answers

ClamAV shows errors found, but how to find out what they are?

Amazon includes clamav-0.98.4 in its AMI version 2014.09.1 so I installed it and gave it a try on one of my EC2 instances. After updating the definitions with freshclam, I've performed a scan with ClamAV using this command: clamscan / -ir \ …
Bas Peeters
  • 121
2
votes
1 answer

Email test deferred (mail transport unavailable) with ClamAV

I'm trying to set up a simple new mail server; when I send a test email to the server the email is getting hung up during delivery (user mapping is found) and the email is never found in /home/user/Maildir/new Here is my maillog after a fresh reboot…
Brock Hensley
  • 208
2
votes
3 answers

How to open a clam antivirus database file

I want to read the contents of a .CVD file (Clam AV database file). How can I do this? I tried deleting the first 512 bytes of the file and then rename it to .tar.gz but it won't open.
Pouyan Izadi
  • 21
2
votes
1 answer

What Regex syntax is used to specify include/exclude for clamscan

I just installed clamav on my linux system. I intend to do a manual scan of the whole system from root (/). But there are directories I know should be skipped (e.g. /proc, /sys, /dev). The clamscan online documentation only gives an abbreviated list…
Mike Lippert
  • 141
2
votes
0 answers

Does clamd scan memory during startup and/or restart?

I have an Ubuntu 14.04 using ClamAV to scan some files manually as part of some software. I have clamd running all the time and am using clamdscan to let it scan my files. Scanning the files is pretty fast, restarting the daemon because of…
Thorsten Schöning
  • 1,110
1
vote
0 answers

Debian server getting spammed through

This server has been live for many years, however, recently it is under attack by spam. I have not been able to plug the hole they are using. It seems that the spam is using the sasl_username=clamav. My postfix configuration is…
user150182
  • 11
1
vote
1 answer

How to update an install of ClamAV on one VM that is offline after updating it on another VM that is online

The host OS Windows 10 and I it is running VirtualBox 6.1.12. Guest OS 1 (VM 1): Ubuntu 16.04 headless server: Network Setting: Adapter 1 attached to Bridged : Network Setting: Adapter 2 attached to Internal network Guest OS 2 (VM 2): Ubuntu 16.04…
learning
  • 13
1
vote
1 answer

Update virus definitions for a ClamAV Docker container

Does anyone know how to maintain a ClamAV container? Specifically, it's the ClamAV container included with MailCow, but I'd like to use Docker more broadly as well, so how can I keep something like virus definitions, or other updateables in…
MJHd
  • 133
1
vote
1 answer

yum install clamtk says no package clamtk available

I've looked through the yum install no package available different answers and I haven't found an answer. I'm following a tutorial and it said to run sudo yum install clamtk However when I run that I get this: Loading mirror speeds from cached…
FabricioG
  • 121
1
vote
1 answer

amavis: [virus_name_to_spam_score] is empty when using certain clam database

I have a weird behavior regarding virus_name_to_spam_score. I’m using 2 custom Clamav DB. Here are the logs when using SaneSecurity where we can see that everything is working fine: Jun 12 10:57:53 prd-mail-1 amavis[4428]: (04428-01) run_av…
ca_maer
  • 11
1
2 3