Michael,
I created a step-by-step guide a little over a year ago for the proper
installation. It's pretty simple to do. I can't say however if the
steps have changed in the latest release, and obviously the version that
I linked to is old now and should be updated.
So here are my abridged directions for a standard install.
1) You need 7zip installed (http://www.7-zip.org/), and to open
files in 7zip, you open the file manager and double click the 7z or
ZIP files.
2) Download the "Current Stable" code from
http://oss.netfarm.it/clamav/ For Windows 32bit, it would be
clamav-win32-0.94.2.7z
3) Create a directory structure with C:\ClamAV and also create a
sub-directory of C:\ClamAV\DB Put the files from the above 7z file
into C:\ClamAV
4) Run C:\ClamAV\clamav.reg to put some directory entries into the
registry. These are by default pointing to the directory structure
that I am using.
5) From a command prompt run C:\ClamAV\freshclam.exe
--datadir="C:\ClamAV\DB" --daemon-notify This will download the
latest definitions and let the service know to reload them if new
ones are found. You want to schedule a task to run this every 15
minutes (there is virtually no load if no updates are available).
There is no need to install freshclam as a service.
6) From a command prompt run C:\ClamAV\clamd --install This will
install the "ClamWin Free Antivirus Scanner Service" You then want
to edit the service properties to start automatically, and set your
recovery options to restart the service.
7) Download the "ClamAV GUI Wrapper" from
http://oss.netfarm.it/clamav/ You only need one file from this zip,
ClamAV-GUI.exe, and yo uwant to place that in C:\ClamAV This is a
simple GUI for scanning files and directories and can be useful.
You can create a short-cut for it if you want.
8) Configure Declude for ClamAV with the following (it is probably
best to have this as the first scanner since it is the fastest):
SCANFILE1 C:\ClamAV\ClamDScan.exe --quiet --no-summary -l
report.txt
VIRUSCODE1 1
REPORT1 .
9) Check your virus logs for "Virus scanner 1 reports" in order to
verify that it is running.
Note, if you want to use a non-default location, you will need to change
the location in the following three things (don't quote me on this)
1) clamav.reg
2) clamd.conf
3) The freshclam.exe --datadir argument
Matt
On 4/29/2010 4:14 PM, Michael Cummins wrote:
The official download from Clam wouldn't install on my Windows 2003
box. It said it only supports Windows 7, Vista, told me to go pound
sand, yada yada.
The stuff at oss.netfarm.it didn't come with very much in the way of
instructions, but the ClamAID stuff did and it was also familiar with
Declude so it gave me a warm and fuzzy feeling. It also didn't look
like clamav-win32-0.96.7z was going to set up FreshClam as a service,
or at least didn't mention it, and I hate installing random product
just to see what it does.
Not dissing anything, just explaining why I chose it. You're
completely right. I'm completely clam-n00b. I've never worked with
ClamAV, don't know its parts and pieces from a racoon skin hat, and
was grateful to have a nice page of instructions (thanks, ARM!),
especially on how to test it before configuring Declude. Also, the
ClamAID example used the .conf file in their Declude config, while the
Declude example didn't. I thought that was handy, too.
It at least gave me a place I could kludge from, and now I know a lot
more about how the product works.
Just splaining where my head was and leaving a trail here in the
archives in case it helps someone else. :)
- Michael Cummins
*From:* supp...@declude.com [mailto:supp...@declude.com] *On Behalf Of
*Andy Schmidt
*Sent:* Thursday, April 29, 2010 3:14 PM
*To:* declude.virus@declude.com
*Subject:* RE: [Declude.Virus] ClamAV
There really is no need for ClamAid, because the recent builds
(including oss.netfarm.it) already are able to install themselves as
services, and the additional ClamAid DLLs will obsolete once you
install the "official" version.
So unless you need help adding the 3 lines to the Virus.cfg, ClamAid
probably makes things unnecessary complicated...
*From:* supp...@declude.com [mailto:supp...@declude.com] *On Behalf Of
*Michael Cummins
*Sent:* Thursday, April 29, 2010 2:50 PM
*To:* declude.virus@declude.com
*Subject:* RE: [Declude.Virus] ClamAV
In case this is helpful for someone else that isn't so great at
rolling their own Clams from the source code:
First, I installed ClamAID using the default options. (SmarterMail /
Declude install for me)
http://www.armresearch.com/tools/arm/clamAID.jsp
This installs Clam 0.92, wraps it up as a service, wraps up FreshClam
as a service and gets everything pointed and configured for Declude to
use. It includes pthreadVC2.dll , but I don't know if it uses it once
we replace the files here in a bit, because...
...when FreshClam goes to update the DB, it mangles the DB dies,
because version 0.92 isn't supported anymore.
Immediately after installing ClamAID I stopped the ClamAVSvc and
FreshClam services and I commented out the lines it added in virus.cfg
so I could get it all running properly again.
I downloaded the clamav-win32-0.96.7z from
http://oss.netfarm.it/clamav/ and extracted the files to a folder. I
grabbed all the .exe and .dll files and replaced the old ones in
\Program Files\Clam AV. I edited \conf\clamd.conf and commented out
the deprecated MailFollowURLs on line 226. I deleted the files in
\data\ and crated a \db\. I set the log levels in clamd.conf and
freshclam.conf to high so I could see things chugging along until I
was comfortable. I hard set the database to \db\ in the conf files,
and set verbose logging.
I cranked up the services, and watched FreshClam download new profiles
to \db\.
Once the db was downloaded, I tested Clam from the command prompt as
described on the armresearch page, and everything looked like it was
working fine.
I uncommented the lines in Declude, restarted Declude, and watched it
all start humming.
Now I am just keeping an eye on things, and waiting for Clam to catch
a virus.
-- Michael Cummins
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
