Re: [clamav-users] Frequency of ClamAV Scan

[G.W. Haywood]

Hi there,

On Thu, 3 Jan 2019, Kaushal Shriyan wrote:


I am running CentOS Linux release 7.6.1810 (Core) with ClamAV installed.
How frequent ClamAV scan should be run? is it once per day.


We cannot know anything about how you use your system if you do not
tell us.  For example it may not be connected to a network, in which
case worrying about viruses might be pointless.  Or you may allow any
random Internet user to upload files to it, in which case you should
probably be looking for Windows/Mac/Amiga/PET viruses as well as those
likely to affect Linux (in case your system becomes a vector spreading
malware to the rest of the planet...).  But you would probably only be
looking in certain areas of your system - those to which you allow the
uploads, for example.  You might also want to think about firewalling.

So please, tell us more.  Then we can help more.


...
I am running the below command.
...
#clamscan --infected --recursive /


Do not do this on a Linux system.  You need to learn more about your
system before you attempt to use tools like ClamAV on it.  There are
directories on a Linux system (such as /dev, /proc and /sys) which
should never be scanned in this way - you risk upsetting your system
if you attempt to scan them recursively.


Do i also need to invoke freshclam before running clamscan to update AV 
Database?


My guess would be that most people who use ClamAV on Linux and similar
operating systems will use a tool such as 'cron' to automatically run
freshclam a few times per day.  There will probably be no point in
running it more often than that, because the published databases which
contain signatures are updated in a similar time frame.  Of course we
don't know if you're doing things with your system which might require
special consideration, but you're going to tell us about those things...

--

73,
Ged.
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Frequency of ClamAV Scan

[Matus UHLAR - fantomas]

On 02.01.19 23:48, Kaushal Shriyan wrote:

I am running CentOS Linux release 7.6.1810 (Core) with ClamAV installed.
How frequent ClamAV scan should be run? is it once per day. I am running
the below command. Do i also need to invoke freshclam before running
clamscan to update AV Database?

#freshclam
#clamscan --infected --recursive /

Please suggest.


I would only scan directories where it can be useful, e.g. web roots.
scanning daily should be OK.

other possibilities include scanning by FTP server at upload time.

This can be used in addition to daily scanning - daily scanning can find
malware not found at upload time.

I guess most people use clamav to scan e-mail traffic.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Remember half the people you know are below average. 
___

clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Frequency of ClamAV Scan

[Al Varnell]

Start here: .

Sent from my iPad

-Al-

On Jan 2, 2019, at 18:04, Kaushal Shriyan wrote:
> How do i install 3rd party signatures which can be implemented that can look 
> for linux malware. I am running the below commands as usual. 
> 
> #freshclam
> #clamscan --infected --recursive /
> 
> Please suggest.
> 
> Best Regards,
> 
> Kaushal
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Frequency of ClamAV Scan

[Kaushal Shriyan]

On Thu, Jan 3, 2019 at 1:37 AM J.R.  wrote:

> I just have my ClamAV scan email. I don't think the default signatures
> would pick up much else on a linux OS (I could be wrong though).
>
> There are 3rd party signatures you can implement that can look for
> linux malware. I do a nightly scan on my server that include those.
>
> Depending on what the machine is used for, I think there is even the
> ability to do on-demand scanning when any file is accessed or created
> or whatnot...
>
> It's not going to hurt anything to run freshclam before running a daily
> scan.
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml


Hi J.R,

How do i install 3rd party signatures which can be implemented that can
look for linux malware. I am running the below commands as usual.

#freshclam
#clamscan --infected --recursive /

Please suggest.

Best Regards,

Kaushal
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Frequency of ClamAV Scan

[J.R.]

I just have my ClamAV scan email. I don't think the default signatures
would pick up much else on a linux OS (I could be wrong though).

There are 3rd party signatures you can implement that can look for
linux malware. I do a nightly scan on my server that include those.

Depending on what the machine is used for, I think there is even the
ability to do on-demand scanning when any file is accessed or created
or whatnot...

It's not going to hurt anything to run freshclam before running a daily scan.
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml