Clamav - Revision history

Ractive at 21:08, 11 March 2018

2018-03-11T21:08:12Z

← Older revision		Revision as of 21:08, 11 March 2018
Line 91:		Line 91:

	#run clamscan full system check at 1:35am and email on infected files		#run clamscan full system check at 1:35am and email on infected files
	35 01 * * * sudo /usr/local/sbin/clamscan_daily.sh > dev/null		35 01 * * * sudo /usr/local/sbin/clamscan_daily.sh > /dev/null

	clear out the stuff we used to build and install clamav:		clear out the stuff we used to build and install clamav:

2018-03-04T18:37:26Z

← Older revision		Revision as of 18:37, 4 March 2018
Line 71:		Line 71:
	if [ "$MALWARE" -ne "0" ];then		if [ "$MALWARE" -ne "0" ];then
	# using heirloom-mailx below		# using heirloom-mailx below
	echo "$EMAIL_MSG"\|mail -a "$LOGFILE" -s "Malware Found On ~~nsserver~~" -r "$EMAIL_FROM" "$EMAIL_TO";		echo "$EMAIL_MSG"\|mail -a "$LOGFILE" -s "Malware Found On server" -r "$EMAIL_FROM" "$EMAIL_TO";
	fi		fi

2018-03-04T18:37:04Z

2018-03-04T17:24:57Z

← Older revision		Revision as of 17:24, 4 March 2018
Line 53:		Line 53:
	sudo nano /usr/local/sbin/clamscan_daily.sh		sudo nano /usr/local/sbin/clamscan_daily.sh

	And paste this in:		And paste this in: (change email addresses as necessary)
	#!/bin/bash		#!/bin/bash
	LOGFILE="/var/log/clamav/clamav-$(date +'%Y-%m-%d').log";		LOGFILE="/var/log/clamav/clamav-$(date +'%Y-%m-%d').log";

2018-03-04T17:24:14Z

← Older revision		Revision as of 17:24, 4 March 2018
Line 82:		Line 82:
	sudo mkdir /var/log/clamav		sudo mkdir /var/log/clamav
	test it with: (a full system scan takes something like 25 min on my RPI 3)		test it with: (a full system scan takes something like 25 min on my RPI 3)
			This will do a full system scan and email you when it finds infected files (which it will...those test files)
	sudo /usr/local/sbin/clamscan_daily.sh		sudo /usr/local/sbin/clamscan_daily.sh
	add a crontab entry to run at 1:30am and run freshclam		add a crontab entry to run at 1:30am and run freshclam
Line 87:		Line 88:
	paste this in:		paste this in:
	#run freshclam to get the latest virus definitions		#run freshclam to get the latest virus definitions
	30 01 * * * sudo freshclam		30 01 * * * sudo freshclam > /dev/null

	#run clamscan full system check at 1:35am and email on infected files		#run clamscan full system check at 1:35am and email on infected files
	35 01 * * * sudo /usr/local/sbin/clamscan_daily.sh		35 01 * * * sudo /usr/local/sbin/clamscan_daily.sh > dev/null

	clear out the stuff we used to build and install clamav:		clear out the stuff we used to build and install clamav:
			cd ..

	rm clamav-0.99.3.tar.gz		rm clamav-0.99.3.tar.gz

2018-03-04T17:19:20Z

2018-03-04T16:06:48Z

← Older revision		Revision as of 16:06, 4 March 2018
Line 116:		Line 116:
	paste this in:		paste this in:
	#run freshclam to get the latest virus definitions		#run freshclam to get the latest virus definitions
	30 01 * * * sudo ~~frechclam~~		30 01 * * * sudo freshclam

	#run clamscan full system check at 1:35am and email on infected files		#run clamscan full system check at 1:35am and email on infected files

2018-03-04T16:05:55Z

@@ Line 152: / Line 152: @@
   sudo make install
 ==References==
 https://www.clamav.net/<br>
 https://www.howtoforge.com/tutorial/configure-clamav-to-scan-and-notify-virus-and-malware/<br>

2018-03-04T15:36:32Z

← Older revision		Revision as of 15:36, 4 March 2018
Line 130:		Line 130:

	==Install==		==Install==
	Get the latest source code from: https://www.clamav.net/downloads		Get the latest source code from: https://www.clamav.net/downloads<br>
	Download with wget:		Download with wget:
	wget https://www.clamav.net/downloads/production/clamav-0.99.4.tar.gz		wget https://www.clamav.net/downloads/production/clamav-0.99.4.tar.gz

			Untar with:
			tar zxf clamav-0.99.4.tar.gz

			Enter the clamav directory:
			cd clamav-0.99.4/

			Create clamav user:
			sudo adduser --disabled-login clamav

			Download and install prerequisites for compiling:
			sudo apt install libssl-dev libpcre3 libpcre3-dev libbz2-dev

			Compile ClamAV:
			./configure

			make

			sudo make install

	==References==		==References==
	https://www.clamav.net/<br>		https://www.clamav.net/<br>
	https://www.howtoforge.com/tutorial/configure-clamav-to-scan-and-notify-virus-and-malware/<br>		https://www.howtoforge.com/tutorial/configure-clamav-to-scan-and-notify-virus-and-malware/<br>

2018-03-04T15:06:39Z

← Older revision		Revision as of 15:06, 4 March 2018
Line 129:		Line 129:
	Please note that the log files are NOT setup with logrotate, so they will eventually build up and eat up space...something else for me to figure out :)		Please note that the log files are NOT setup with logrotate, so they will eventually build up and eat up space...something else for me to figure out :)

	~~References~~:		==Install==
			Get the latest source code from: https://www.clamav.net/downloads
			Download with wget:
			wget https://www.clamav.net/downloads/production/clamav-0.99.4.tar.gz

	https://www.clamav.net/
	https://www.howtoforge.com/tutorial/configure-clamav-to-scan-and-notify-virus-and-malware/		==References==
			https://www.clamav.net/<br>
			https://www.howtoforge.com/tutorial/configure-clamav-to-scan-and-notify-virus-and-malware/<br>