linux:antivirus
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
linux:antivirus [2025/05/16 10:16] manu |
linux:antivirus [2025/05/16 10:55] (current) manu |
||
|---|---|---|---|
| Line 166: | Line 166: | ||
| <code> | <code> | ||
| #!/bin/bash | #!/bin/bash | ||
| - | clamlog=/var/log/clamav/clamav.log | + | logname=/var/log/clamav/clamav.log |
| - | rm -f $clamlog | + | |
| + | CURRTIME=$(date +"%Y-%m-%d_%H_%M") | ||
| + | clamlog=/var/log/clamav/clamav_${CURRTIME}.log | ||
| + | quarantine=/var/clamav/infected | ||
| + | |||
| + | main() | ||
| + | { | ||
| touch $clamlog | touch $clamlog | ||
| Line 175: | Line 181: | ||
| then mail -s "Malware Found $(hostname -i; uname -a)" $(cat ~/.env/EMAIL) <<< | then mail -s "Malware Found $(hostname -i; uname -a)" $(cat ~/.env/EMAIL) <<< | ||
| $(cat $clamlog); fi | $(cat $clamlog); fi | ||
| + | } | ||
| + | main > $logname 2>&1 | ||
| </code> | </code> | ||
| + | <cli prompt='#'> | ||
| + | # clamconf -n | ||
| + | |||
| + | Checking configuration files in /etc/clamav | ||
| + | |||
| + | Config file: clamd.conf | ||
| + | ----------------------- | ||
| + | PreludeAnalyzerName = "ClamAV" | ||
| + | LogFile = "/var/log/clamav/clamav.log" | ||
| + | LogFileMaxSize = "209715200" | ||
| + | LogTime = "yes" | ||
| + | LogRotate = "yes" | ||
| + | ExtendedDetectionInfo = "yes" | ||
| + | LocalSocket = "/var/run/clamav/clamd.ctl" | ||
| + | LocalSocketGroup = "clamav" | ||
| + | LocalSocketMode = "666" | ||
| + | MaxConnectionQueueLength = "15" | ||
| + | StreamMaxLength = "26214400" | ||
| + | MaxThreads = "12" | ||
| + | ReadTimeout = "180" | ||
| + | SendBufTimeout = "200" | ||
| + | ExcludePath = "/.git/", "lost+found", "^/run/", "^/sys/", "^/dev/", "^/proc/", "^/var/log/", "^/home/adoyle/", "^/ssd", "^/hdd", "^/mnt | ||
| + | " | ||
| + | SelfCheck = "3600" | ||
| + | User = "clamav" | ||
| + | BytecodeTimeout = "60000" | ||
| + | ScanHTML disabled | ||
| + | ScanOLE2 disabled | ||
| + | ScanPDF disabled | ||
| + | MaxScanTime = "120000" | ||
| + | MaxScanSize = "104857600" | ||
| + | MaxFileSize = "26214400" | ||
| + | MaxRecursion = "16" | ||
| + | MaxEmbeddedPE = "10485760" | ||
| + | MaxHTMLNormalize = "10485760" | ||
| + | MaxHTMLNoTags = "2097152" | ||
| + | MaxScriptNormalize = "5242880" | ||
| + | PCREMatchLimit = "10000" | ||
| + | PCRERecMatchLimit = "5000" | ||
| + | PCREMaxFileSize = "26214400" | ||
| + | OnAccessMountPath = "/" | ||
| + | OnAccessExcludePath = "/.git/", "lost+found", "/run", "/sys/", "/dev/", "/proc/", "/var/log/", "/home/adoyle/", "/ssd", "/hdd", "/mnt" | ||
| + | OnAccessExcludeRootUID = "yes" | ||
| + | OnAccessExcludeUname = "clamav" | ||
| + | |||
| + | Config file: freshclam.conf | ||
| + | --------------------------- | ||
| + | LogFileMaxSize = "4294967295" | ||
| + | LogTime = "yes" | ||
| + | LogRotate = "yes" | ||
| + | UpdateLogFile = "/var/log/clamav/freshclam.log" | ||
| + | Checks = "24" | ||
| + | DatabaseMirror = "db.local.clamav.net", "database.clamav.net" | ||
| + | MaxAttempts = "5" | ||
| + | ReceiveTimeout disabled | ||
| + | |||
| + | clamav-milter.conf not found | ||
| + | |||
| + | Software settings | ||
| + | ----------------- | ||
| + | Version: 1.0.1 | ||
| + | Optional features supported: MEMPOOL AUTOIT_EA06 BZIP2 LIBXML2 PCRE2 ICONV JSON | ||
| + | |||
| + | Database information | ||
| + | -------------------- | ||
| + | Database directory: /var/lib/clamav | ||
| + | daily.cld: version 26925, sigs: 2036167, built on Thu Jun 1 15:27:46 2023 | ||
| + | bytecode.cvd: version 334, sigs: 91, built on Thu Feb 23 05:33:21 2023 | ||
| + | main.cvd: version 62, sigs: 6647427, built on Thu Sep 16 20:32:42 2021 | ||
| + | Total number of signatures: 8683685 | ||
| + | |||
| + | Platform information | ||
| + | -------------------- | ||
| + | uname: Linux 6.1.0-0.deb11.7-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.20-2~bpo11+1 (2023-04-23) x86_64 | ||
| + | OS: Linux, ARCH: x86_64, CPU: x86_64 | ||
| + | Full OS version: No LSB modules are available. | ||
| + | Debian GNU/Linux 12 (bookworm) | ||
| + | zlib version: 1.2.13 (1.2.13), compile flags: a9 | ||
| + | platform id: 0x0a21a1a108000000000c0200 | ||
| + | |||
| + | Build information | ||
| + | ----------------- | ||
| + | GNU C: 12.2.0 (12.2.0) | ||
| + | sizeof(void*) = 8 | ||
| + | Engine flevel: 161, dconf: 161 | ||
| + | </cli> | ||
linux/antivirus.1747383365.txt.gz · Last modified: 2025/05/16 10:16 by manu
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
