Questions tagged [clamav]
ClamAV is an open source anti-virus toolkit. Use this tag for questions specific to ClamAV anti-virus.
66 questions
0
votes
0
answers
85
views
What countermeasures are required for alert /var/lib/clamav/rfxn.yara: Php.Exploit.C99-27 FOUND?
Running ClamAV on my Linux Mint laptop gives
/var/lib/clamav/rfxn.yara: Php.Exploit.C99-27 FOUND
What does it mean on a laptop (not a server as such)?
Is the system infected?
0
votes
1
answer
76
views
Where can I find details of malware found by ClamScan based on the ClamScan malware name?
ClamScan found a Trojan program called Win.Trojan.Rider_4000_B-1. Where can I find more information about how this malware works?
1
vote
2
answers
1k
views
ClamAV freshly installed on LMDE - failing to open log file (permission denied)
I've just freshly installed Linux Mint Debian Edition "Faye" and then installed ClamAV.
The services clamav-freshclam and clamav-daemon don't seem to have a problem opening and writing into ...
-1
votes
1
answer
121
views
Can ClamAV detect malicious files on a MySQL/MariaDB server?
Can ClamAV help detect malicious files (ie malware, rootkits, etc) for a MySQL/MariaDB server, specifically the /var/lib/mysql data folder?
The database server is a single role and locked down both by ...
0
votes
0
answers
622
views
ClamAV states virus databases are up to date but FreshClam log file says otherwise
I installed ClamAV. The setup was done some time ago, but I've noticed that, apparently, FreshClam hasn't run since September 22nd:
[x80486@uplink:~]$ sudo cat /var/log/clamav/freshclam.log
-----------...
1
vote
2
answers
3k
views
ClamD Service Unable to Start
I am currently following this guide on setting up ClamAV on my AlmaLinux 9.3 machine however at Step 11 I cannot start the clamd@service and wanted to know if anyone else has also had this issue as I ...
0
votes
1
answer
1k
views
ClamAV clamscan Warning Gives No File Path
I am running ClamAV on RedHat 9.3 and getting some new output from our daily scan that uses the command /bin/clamscan -r / --exclude-dir=/sys/ --log=/var/log/clamscan.log --infected --quiet:
...
0
votes
1
answer
125
views
Notifications stating Trojans found on Fedora 37
I help friends manage systems which feature Fedora OS. They have been reporting that notifications are being highlighted mentioning the presence of Trojans and such and they are alarmed. I generally ...
2
votes
1
answer
2k
views
How to configure ClamAV on Debian 11? (Need sample clamd.conf and correct location)
Since upgrading from Debian 9 to Debian10/11 Clamscan now runs the system out of memory immediately - instead of previously completing all scans successfully.
But the /etc/clamav/clamd.conf file does ...
0
votes
1
answer
506
views
clamscan and cpulimit together runs multiple clamscan processes in ubuntu 18 and 20
I have installed clamav and cpulimit. I want to clamscan all directories in /home which are not owned by root 1 by 1 with a cpu limit of 70%.
I use the below command to do that in centos and almalinux:...
0
votes
1
answer
60
views
clamtk does not redirect stdout for its cron job
I have noticed that clamtk only redirects stderr to /dev/null and not stdout.
if I change the cronjob it creates to also redirect stdout, will that effect the log file it creates?
I want to use the ...
2
votes
0
answers
1k
views
ClamAV's main.cld file is too large - can it be removed or compressed?
The main.cld file in /var/lib/clamav/ is over 400 MB in size and daily.cld is over 150 MB.
Are these filesizes normal and can these files be made smaller somehow? For example, by deleting them and ...
2
votes
0
answers
3k
views
How to use Clamscan to scan for files larger than 4GB
I need to scan files larger than 4GB, I tried the following solutions:
1- I tried to edit the clamd.conf and set the
MaxScanSize 100000M
MaxFileSize 100000M
(Just any arbitrary size that's larger than ...
0
votes
2
answers
1k
views
Shall I trust this antivirus?
ClamTK shows me this as possible threats:
Found 173 possible threats (553458 files scanned).
/home/mohamad/.cache/mozilla/firefox/134jnwkg.default-esr78/cache2/entries/...
3
votes
1
answer
1k
views
Clamav - can you only load the linux-specific definitions from /var/lib/clamav/*.cld?
We're investigating applications that seem to use large amounts of memory, one of those being clamav. We noticed that there are lots of av definitions for windows, osx, xls, doc, rtf etc. in /var/lib/...