Paul Stear wrote:

hi all,
I use kmail and have installed clamav. I updated clamav db using freshclam and then run clamscan on my mail dir, it found 4 infected files:-

/home/paul/Mail/trash/cur/1075475535.2312.nh0h: Worm.Gibe.F FOUND
/home/paul/Mail/trash/cur/1075475726.2312.qiyM: Exploit.IFrame.Gen FOUND
/home/paul/Mail/trash/cur/1075475722.2312.Z2xn: Worm.Gibe.F FOUND
/home/paul/Mail/trash/cur/1075475538.2312.xlv0: Exploit.IFrame.Gen FOUND

I have 3 questions
1. How can I get freshclam ( runs as root ) to run once each day when I switch my computer on?
2. How can I set things up so that clamscan runs and checks the mail either during or straight after loading from my isp?
3. How do I get the infected files deleted automatically so there is no chance of anybody opening them?

Thanks in advance for any help
Paul

Since you are running gentoo ... the package installs a script to do this.

# rc-update add freshclam default
# /etc/init.d/freshclam start

If you want to start it manually as a daemon:

# /usr/bin/freshclam -d -c 2 -l /var/log/clamav/clam-update.log

As far as getting to scan your mail ... it is best for clamav to do it at your mail server. It depends upon the MTA as to what solution to use. I use postfix and amavisd-new and email is quarantined immediately upon arrival and never makes it to any mailbox at all.

Tom Veldhouse

Attachment: pgp00000.pgp
Description: PGP signature



Reply via email to