43
questions
0
votes
0
answers
31
views
How to retrieve the name of the virus that was found with clamd, with the clamav_client crate?
When using clamav_client, how does one retrieve the name of the virus that was found by clamd ?
let buffer = br#"X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*"#;
let ...
2
votes
0
answers
707
views
Scanning multiple files in parallel using clamav > clamd is very slow
I am in process of using clamd as a service for scanning multiple files in parallel.
My workflow:
ReadFile on client machine
Stream data in blocks to clamav service
Open clamd socket connection and ...
1
vote
0
answers
58
views
how to kill cpulimit right after clamscan in php when both are running in background
I have switched as the user in linux using php code.
I set cpulimit to 88% for clamscan and then scan /home/user or /home/user/mail recursively using clamscan.
As you can see both the exec codes below,...
0
votes
1
answer
2k
views
ClamAV clamscan not scanning for infected files present inside an archived file
I am testing ClamAV to detect viruses on machine.
I am running
clamscan -r -i "Path to folder containing archive that has infected file"
It fails to detect the infected file present inside ...
3
votes
1
answer
2k
views
Connecting to ClamAV with curl fails, but clamdscan succeeds
I have a ClamAV installed on a RHEL 8 box. clamd is running, listening on port 3310.
If I run the command 'clamdscan' on the same host, it succeeds.
As per the man page of clamd, I created a text file ...
0
votes
1
answer
3k
views
How to test ClamAV service for potential threats
As part of an enterprise software project, our application connects to an antivirus service backed by ClamAV, using ICAP as communication protocol. I would like to test the antivirus service response ...
-1
votes
1
answer
2k
views
clamav docker build for non root user issue
From node:16.10-stretch
WORKDIR /app
COPY . .
RUN apt-get update && npm install && apt-get install clamav-daemon -y && \
freshclam && echo "TCPSocket 3310"...
1
vote
1
answer
2k
views
Trying to specify binary path for clamAV
I am trying to use clamscan on my windows 10 pro machine in NodeJS.
Clamscan is installed to
C:\Program Files\ClamAV
I have this code..
const NodeClam = require('clamscan');
const ClamScan = new ...
1
vote
0
answers
1k
views
How to setup calm antivirus in k8s environment and interact from a django app pod?
I am using django-clamd (https://github.com/vstoykov/django-clamd) inside my django app. The scanning works fine on my local system while uploading files and virus containing files are detected.
I ...
1
vote
0
answers
225
views
How to secure communication between ClamAV daemon and Client?
I have a Web Application running on Heroku. I want to scan the Uploaded Files.
My clamd is running outside of Heroku on a EC2 Instance.
Is the ClamAV communication between those two Systems encrypted?
...
8
votes
1
answer
18k
views
Can't stop Clamav deamon in Linux
I am trying to stop Clamav service in Linux, but I am not able to do that.
I have installed Clamav in a seperate directory.
When running below command:
$ systemctl stop clamav-daemon
I get this ...
9
votes
3
answers
5k
views
Anti-virus in docker container - does fanotify works between host and container?
I need to implement anti-virus on-access scanning solution for files inside docker containers using open-source software. Clamav On-Access works fine but have some requirements and limitations:
...
0
votes
1
answer
1k
views
Using Netty with ClamAV Instream
I have been stuggling with a configuration using Netty to stream bytes to a ClamAV service. I am running in an Apache Camel route.
Using Netty, I am unable to intercept the "INSTREAM size limit ...
0
votes
1
answer
983
views
How do I disable Clamav from downloading virus database from Internet
I have clamav software installed in my Server (Centos 7) which is under a corporate proxy. I want to stop clamav from trying to download virus databases everytime I try to run freshclam. I'm updating ...
1
vote
1
answer
427
views
nClam - How to pass linux server path to ScanFileOnServer
I have set up ClamAv running in a docker container inside Ubuntu VM (VirtualBox). I have written the following C# program (running from my Windows Host) and able to scan local files in my windows ...
0
votes
1
answer
2k
views
How to run clamd as a service on Centos 8
I have downloaded clamd (and clamav) and I'd like to run clamd with on-access scanning as a service with systemctl. Is this even possible on Centos 8? If not, is there a anticirus alternative which ...
1
vote
0
answers
152
views
PHP and ClamAV socket programming
I'm really new to ClamAV and PHP socket programming.
And need to create a socket file that the ClamAV daemon will listen on.
I really don't know how to connect to ClamAV at all or where to begin any ...
1
vote
4
answers
7k
views
Scan files in AWS S3 bucket for virus using lambda
We've a requirement to scan the files uploaded by the user and check if it has virus and then tag it as infected. I checked few blogs and other stackoverflow answers and got to know that we can use ...
1
vote
2
answers
7k
views
Azure function host dies with OutOfMemoryException, without triggering
Quick version: Why does my function host kill it self after 5 minutes without doing anything?
I have an Azure function which uses nClam to scan blob files for viruses. It seems to work just fine, but ...
2
votes
1
answer
3k
views
Azure: How do I scan an incoming blob/file before it goes into blob storage?
I am currently working on creating a sort of virus scanning function.
What I am trying to do: When a file is uploaded to a specified blob storage container, an Azure Function is triggered. That ...
0
votes
1
answer
377
views
Clamav logical signature generation
I am trying to generate clamav signatures for a malware dataset that I have.
Initially I have recognized some strings which are prominent in a class of malware, hence, those are considered and a ldb ...
7
votes
0
answers
2k
views
intermittent issues with ClamAV clamd INSTREAM on socket
I've got an AWS Lambda function running NodeJS code to stream files from S3 to ClamAV running on an EC2 instance.
Generally (about 75% of the time) the system works, but often (especially when ...
1
vote
1
answer
2k
views
CentOS 7 unable to connect clamd.sock file (Permission denied error)
I am trying to scan uploaded files on PHP server using clamAV. I've installed ClamAV on my server (Centos 7). Currently, I am using PHP 7, so I am using Clamd socket connection to scan uploaded files. ...
0
votes
1
answer
208
views
Can Clamd be relied upon to unpack RFC-822 format .eml files? It seems to do it
I'm using ClamAV, communicating via a Unix socket a la https://github.com/Elycin/php-clamav/. All working so far.
My app picks up files from a folder. Each file contains RFC822-compliant content (...
0
votes
1
answer
4k
views
PHP. Permissions of upload temp file under /tmp . How to configure
In my PHP class i upload files and then scan them with antivirus.
Uploaded files are stored in /tmp with names like /tmp/phpRANDOM (allas usually)
But when i pass this path to clamav server it ...
8
votes
1
answer
11k
views
How to perform automated virus scanning on files uploaded to AWS S3
I am attempting to ensure files which get uploaded to S3 do not contain malware or malicious scripts before moving the file into a more secure part of the infrastructure (another S3 bucket in a ...
1
vote
1
answer
2k
views
Running into "No space left on device" when trying to download a big file ~700MB in lambda from s3
Usecase: Scan a uploaded file on s3 using AWS Lambda.
Issue: While downloading the file for scanning using ClamAV in the lambda function, I run into "No space left on device" when the file is > ...
0
votes
3
answers
853
views
Installing a NuGet package from source?
I want to use nClam (https://github.com/tekmaven/nClam), a library for antivirus scanning with .NET core 1.1. The library currently requires .NET core 2.0 but it looks like I can work around this with ...
1
vote
1
answer
2k
views
clamav-rest Spring 3.2 RestTemplate results in 400 Bad Request
I'm trying to send a file to a Spring Boot application clamav-rest. The curl command is working fine. Here's the output,
curl -k -F name="test file" -F file=@"myfile.pdf" https://clamav.my.org/scan
...
2
votes
3
answers
3k
views
php file upload scanning using clamav, permissions on /tmp/
I'm trying to scan files (generally 100MB+ zips) using clamav on apache 2.4, php 5.6, using a socket to the clamav-daemon. I'm not using PHP-FPM. (p.s. the socket works, I can send a PING and get a ...
-1
votes
1
answer
3k
views
clamav update issue using proxy authentication
I am having trouble using proxy authentication for updating clamav. I added proxy information in /etc/clamav/freshclam.conf as shown below :-
# Proxy Setup
HTTPProxyServer myproxy
HTTPProxyPort 3128
...
-1
votes
1
answer
475
views
Trigger event on host OS from inside a Docker container web app
I have a host OS (Ubuntu) with ClamAV installed. and I am running a Docker container on this OS. This container is running a node web app that is publicly facing.
There is file upload functionality ...
0
votes
1
answer
1k
views
Reading CSV files from RAM
Situation: I have a CVD (ClamAV Virus Database) file loaded into RAM using mmap. The format of every line in the CVD file is same as the one of CSV files (':' delimited). Below is a snippet of the ...
3
votes
0
answers
1k
views
How to compile ClamAV library properly statically?
I've compiled clamav-0.99.2 as follows:
~./configure -enable-static and then make & sudo make install. Compilation was succeed as it seemed to me. But when added to my project libclamav.a in Qt5.8-...
19
votes
5
answers
54k
views
How to be sure ClamAV database is up to date?
I am currently having an issue with ClamAV and freshclam on Centos 6.9.
I have the last Clam engine 0.99.2, and a working internet connection.
Even if I run the # freshclam -v command ( it only ...
1
vote
1
answer
505
views
Virus scanning files with Japanese Characters in C# using nClam and ClamAV
We've been working on implementing a virus scanning procedure for files being uploaded into our system - it's a C# web app where we've used the nClam plugin to converse with a ClamAV server. In a ...
0
votes
1
answer
591
views
Setup Nagios check_clamd
I'm getting a (No output returned from plugin) from a host and cannot understand why:
Service on monitor server:
# Check Clamd availability
define service {
hostgroup_name clamd-...
1
vote
1
answer
467
views
Real Time Malaware scanning using Maldetect : Rejected by the approver script
I have a cPanel server with apache 2.4 and Maldetect, ClamAV. I want to have realtime malware scanner on server to block hackers from uploading malicious files on server. What i meant is when someone ...
0
votes
0
answers
530
views
ClamWin Antivirus update on Windows Azure Virtual Machine
I am trying to update ClamWin on my Windows Azure Virtual Machine. Windows has given popup like Your clamwin has update and when i click on update it will give me error like your update is failed ...
0
votes
1
answer
1k
views
How to update ClamAV in windows
I am using ClamAv in my site to scan the CVs. I have ClamAv of version 0.99.1 and i want to update to 0.99.2.
I tried to download the latest version of clamAV from https://www.clamav.net/downloads, ...
0
votes
0
answers
1k
views
How to connect to ClamAV daemon?
I'm trying to connect to ClamAV daemon clamd on localhost 3310 port via telnet comand in terminal:telnet 127.0.0.1 3310
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
...
1
vote
0
answers
1k
views
Building ClamAV: OpenSSL installation missing X509_VERIFY_PARAM function, undefined symbol _X509_VERIFY_PARAM_new in ld
I'm trying to build ClamAV 99.2 on a Mac PPC Powerbook with OS X 10.4.11 Tiger. The ClamAV configure script always stops with the following lines, regardless the various flags and config-parameters I ...
0
votes
1
answer
327
views
ClamAV copy checked non infected files
I´m currently writing a script that checks USB Sticks for malicious files that runs on a Raspberry Pi.
For AV Checking I´m using clamscan like this:
clamscan --infected --allmatch --detect-pua --...