Questions tagged [clamav]
ClamAV is an open source anti-virus toolkit. Use this tag for questions specific to ClamAV anti-virus.
67 questions
1
vote
0
answers
26
views
Trying to get ClamAV clamonacc on Linux VM host monitoring the Docker overlay2 file system on the host
I've been trying to get ClamAV's clamonacc on-access scanner to monitor the overlay2 file system where Docker container file systems are mounted on my Linux (Ubuntu 24.04) VM, so that I can detect any ...
- 11
0
votes
0
answers
99
views
What countermeasures are required for alert /var/lib/clamav/rfxn.yara: Php.Exploit.C99-27 FOUND?
Running ClamAV on my Linux Mint laptop gives
/var/lib/clamav/rfxn.yara: Php.Exploit.C99-27 FOUND
What does it mean on a laptop (not a server as such)?
Is the system infected?
- 101
0
votes
1
answer
82
views
Where can I find details of malware found by ClamScan based on the ClamScan malware name?
ClamScan found a Trojan program called Win.Trojan.Rider_4000_B-1. Where can I find more information about how this malware works?
- 283
1
vote
2
answers
1k
views
ClamAV freshly installed on LMDE - failing to open log file (permission denied)
I've just freshly installed Linux Mint Debian Edition "Faye" and then installed ClamAV.
The services clamav-freshclam and clamav-daemon don't seem to have a problem opening and writing into ...
- 111
-1
votes
1
answer
127
views
Can ClamAV detect malicious files on a MySQL/MariaDB server?
Can ClamAV help detect malicious files (ie malware, rootkits, etc) for a MySQL/MariaDB server, specifically the /var/lib/mysql data folder?
The database server is a single role and locked down both by ...
0
votes
0
answers
647
views
ClamAV states virus databases are up to date but FreshClam log file says otherwise
I installed ClamAV. The setup was done some time ago, but I've noticed that, apparently, FreshClam hasn't run since September 22nd:
[x80486@uplink:~]$ sudo cat /var/log/clamav/freshclam.log
-----------...
user280674
1
vote
2
answers
3k
views
ClamD Service Unable to Start
I am currently following this guide on setting up ClamAV on my AlmaLinux 9.3 machine however at Step 11 I cannot start the clamd@service and wanted to know if anyone else has also had this issue as I ...
- 133
0
votes
1
answer
1k
views
ClamAV clamscan Warning Gives No File Path
I am running ClamAV on RedHat 9.3 and getting some new output from our daily scan that uses the command /bin/clamscan -r / --exclude-dir=/sys/ --log=/var/log/clamscan.log --infected --quiet:
...
- 101
0
votes
1
answer
131
views
Notifications stating Trojans found on Fedora 37
I help friends manage systems which feature Fedora OS. They have been reporting that notifications are being highlighted mentioning the presence of Trojans and such and they are alarmed. I generally ...
- 127
2
votes
1
answer
2k
views
How to configure ClamAV on Debian 11? (Need sample clamd.conf and correct location)
Since upgrading from Debian 9 to Debian10/11 Clamscan now runs the system out of memory immediately - instead of previously completing all scans successfully.
But the /etc/clamav/clamd.conf file does ...
- 323
0
votes
1
answer
522
views
clamscan and cpulimit together runs multiple clamscan processes in ubuntu 18 and 20
I have installed clamav and cpulimit. I want to clamscan all directories in /home which are not owned by root 1 by 1 with a cpu limit of 70%.
I use the below command to do that in centos and almalinux:...
- 41
0
votes
1
answer
62
views
clamtk does not redirect stdout for its cron job
I have noticed that clamtk only redirects stderr to /dev/null and not stdout.
if I change the cronjob it creates to also redirect stdout, will that effect the log file it creates?
I want to use the ...
3
votes
0
answers
1k
views
ClamAV's main.cld file is too large - can it be removed or compressed?
The main.cld file in /var/lib/clamav/ is over 400 MB in size and daily.cld is over 150 MB.
Are these filesizes normal and can these files be made smaller somehow? For example, by deleting them and ...
- 4,962
2
votes
0
answers
3k
views
How to use Clamscan to scan for files larger than 4GB
I need to scan files larger than 4GB, I tried the following solutions:
1- I tried to edit the clamd.conf and set the
MaxScanSize 100000M
MaxFileSize 100000M
(Just any arbitrary size that's larger than ...
- 21
0
votes
2
answers
1k
views
Shall I trust this antivirus?
ClamTK shows me this as possible threats:
Found 173 possible threats (553458 files scanned).
/home/mohamad/.cache/mozilla/firefox/134jnwkg.default-esr78/cache2/entries/...
- 11