We're using Sophos AV on our all Linux network. https://www.sophos.com/en-us.aspx
It does support command line input and several other quality features. We started using it after some spear phishing attacks caught a few of our less savvy users unawares. On Apr 24, 2015 12:03 AM, "Dan Egli" <[email protected]> wrote: > Does anyone know of a quality virus scanning program for Linux? I don't > mean ClamAV! I've had way too many issues with that program and with the > developers refusing to listen to me when I say something doesn't work. I > mean something like Norton or McAffee. I know that there was a program that > McAffee had that was called uvscan, but I'll be darned if I can remember > where to find it, and I can't be sure it would be compatible with modern > kernels anyway (I recall you had to call it with LD_ASSUME_KERNEL=2.4.2 > prefixed or it wouldn't even run at all, just freeze - and that was on a > 2.4.x kernel, never mind 3.x.y kernels). I'm not opposed to paying a little > for it, but I don't want a full email package like some companies want to > sell me (Symantec comes to mind). I just want a simple command line scanner > that will accept multiple files on the command line (a bug that I never > could get the ClamAV developers to recognize as a bug! They kept insisting > that it was CORRECT for the line "clamscan file1 file2 file3" to search for > a SINGLE FILE called "file1 file2 file3" instead of scanning file1, file2 > and file3) and give a non-zero return code on virus found, zero return code > on no virus found. > > > > Any tips are most welcome. As usual, please include a URL. If someone is > using the old McAffee uvscan program with a modern Linux distro, would you > mind pointing me to the location you got it from and telling me any special > tweaks you need to get it working (besides the LD_ASSUME_KERNEL=2.4.2, of > course)? > > > > Thanks all! > --- Dan > > /* > PLUG: http://plug.org, #utah on irc.freenode.net > Unsubscribe: http://plug.org/mailman/options/plug > Don't fear the penguin. > */ > /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
