ClamAV is installed on my CentOS box. I edited the conf file and assumed all is well. Clearly it isn't. Every day I see in logwatch that my signatures are updated, and the database notified, but if I try to scan a file manually it tells me that my signatures are 55 days old. I tried looking at a how-to, in the hope of identifying the problem, but it is hopelessly out of date, and I reached the stage where it seemed that following it any further risked my installation. Can someone please give me a quick run-down of the things I should check. Clearly freshclam is running, but that's about all I know for certain. Thanks Anne
Anne Wilson wrote:> ClamAV is installed on my CentOS box. I edited the conf file and assumed all > is well. Clearly it isn't. > > Every day I see in logwatch that my signatures are updated, and the database > notified, but if I try to scan a file manually it tells me that my signatures > are 55 days old. > > I tried looking at a how-to, in the hope of identifying the problem, but it is > hopelessly out of date, and I reached the stage where it seemed that > following it any further risked my installation. > > Can someone please give me a quick run-down of the things I should check. > Clearly freshclam is running, but that's about all I know for certain. >first, enable rpmforge repo then... yum install clamav then, run freshclam, and also put it in a daily or weekly cron job to automatically update now, clamscan, or start clamd, or whatever
>Every day I see in logwatch that my signatures are updated, and the database >notified, but if I try to scan a file manually it tells me that my signatures >are 55 days old.I think clamscan looks for the db files in a compiled-in default location of /usr/local/share/clamav and doesn't consult the clamd.conf or freshclam.conf files (after all, why would it?) I fixed it up by symlinking my confgured DatabaseDirectory to where clamscan expected to find things. HTH Simon
Not to move anyone to another package, but to offer another route if you want to consider it. An option other than ClamAV is AVG, it works well, and is easy to install. Grisoft has a Linux version of their AVG Virus Software The free version can be downloaded here ftp://ftp.grisoft.cz/pub/softw/70free/setup/ They have a complete line of Anti-Virus Software for both the MS and Linux worlds, I have used both version for years an like it much more than Symantic ( Norton ) - McAfee etc.. It doesn't wind it's way down into the heart of the OS, it is very stable and in my mind one of the best Anti Virus packages out. If you prefer a paid version, theirs is a very cost effective product with flavors to suit all applications and sizes. More information can be had at http://www.grisoft.com if looking for a one off copy of a basic AV for your Windows machine, then http://free.grisoft.com The free versions don't include all of the bells and whistles but work very well, run and update automatically. john plemons Anne Wilson wrote:> ClamAV is installed on my CentOS box. I edited the conf file and assumed all > is well. Clearly it isn't. > > Every day I see in logwatch that my signatures are updated, and the database > notified, but if I try to scan a file manually it tells me that my signatures > are 55 days old. > > I tried looking at a how-to, in the hope of identifying the problem, but it is > hopelessly out of date, and I reached the stage where it seemed that > following it any further risked my installation. > > Can someone please give me a quick run-down of the things I should check. > Clearly freshclam is running, but that's about all I know for certain. > > Thanks > > Anne > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos > > ------------------------------------------------------------------------ > > > No virus found in this incoming message. > Checked by AVG. > Version: 8.0.100 / Virus Database: 270.3.0/1505 - Release Date: 6/16/2008 7:20 AM >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080617/c49d457b/attachment-0002.html>
On Tuesday 17 June 2008 14:52:30 John Plemons wrote:> Not to move anyone to another package, but to offer another route if you > want to consider it. > > An option other than ClamAV is AVG, it works well, and is easy to install. > > Grisoft has a Linux version of their AVG Virus Software > The free version can be downloaded here > > ftp://ftp.grisoft.cz/pub/softw/70free/setup/ > > They have a complete line of Anti-Virus Software for both the MS and > Linux worlds, I have used both version for years an like it much more > than Symantic ( Norton ) - McAfee etc.. It doesn't wind it's way down > into the heart of the OS, it is very stable and in my mind one of the > best Anti Virus packages out. If you prefer a paid version, theirs is a > very cost effective product with flavors to suit all applications and > sizes. > > More information can be had at http://www.grisoft.com if looking for a > one off copy of a basic AV for your Windows machine, then > http://free.grisoft.com The free versions don't include all of the > bells and whistles but work very well, run and update automatically. >I'll be checking out all the other suggestions, but I'll also look at this, thanks. Anne
On Tue, Jun 17, 2008 at 6:52 AM, John Plemons <john at mavin.com> wrote:> Not to move anyone to another package, but to offer another route if you > want to consider it. > > An option other than ClamAV is AVG, it works well, and is easy to install. > > Grisoft has a Linux version of their AVG Virus Software > The free version can be downloaded here > > ftp://ftp.grisoft.cz/pub/softw/70free/setup/ >Just to add my plug here - I've been using AVG Free on Win for a long, long time, and I've been really pleased with it. Their recent update from 7.5 to 8.0 is badly advertised (from the update page it /looks/ like you have to /pay/ for the new version, but from the above link, there is aplace to get it for free. This is particularly good because the old version will no longer work after June 25, so I get to upgrade everything before then. Now if I could just convince the Win addicts in my family to go to CentOS, we could dispense with that altogether (except for the VMWare guests), but I don't have everywhere yet in which to put everything.... mhr
Hi Anne, I have many servers running clamav, simply use the dag repos http://dag.wieers.com/rpm/ and install it via yum "yum install clamav clamd" then run freshclam, thats it. I presume your configuration is not properly done. -- Cualquier duda o consulta estoy a su disposicion. Atentamente / Sincerely MARTIN GARCIA Consultor Linux y redes Nettix Peru EIRL telf: +(511)9-9735-4848 <http://www.nettix.com.pe> mailto:mgarcia at nettix.com.pe Anne Wilson wrote:> > ClamAV is installed on my CentOS box. I edited the conf file and assumed all > > is well. Clearly it isn't. > > > > Every day I see in logwatch that my signatures are updated, and the database > > notified, but if I try to scan a file manually it tells me that my signatures > > are 55 days old. > > > > I tried looking at a how-to, in the hope of identifying the problem, but it is > > hopelessly out of date, and I reached the stage where it seemed that > > following it any further risked my installation. > > > > Can someone please give me a quick run-down of the things I should check. > > Clearly freshclam is running, but that's about all I know for certain. > > > > Thanks > > > > Anne > > _______________________________________________ > > CentOS mailing list > > CentOS at centos.org > > http://lists.centos.org/mailman/listinfo/centos > > > > ------------------------------------------------------------------------ > > > > > > No virus found in this incoming message. > > Checked by AVG. > > Version: 8.0.100 / Virus Database: 270.3.0/1505 - Release Date: 6/16/2008 7:20 AM > > >-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.centos.org/pipermail/centos/attachments/20080617/c49d457b/attachment-0001.htm -- Este mensaje ha sido analizado por Nettix Peru - MailScanner en busca de virus y otros contenidos peligrosos, y se considera que est? limpio. Para soluciones Antispam/Antivirus visite http://www.nettix.com.pe