Why don't search ClamAV infected files

dawidson · 11-24-2005, 09:28 AM

I running clamd
clamd
and copy files from eicar.com
and this program don't find virus
if i scan yes ok.
but demon when i copy to server files then don't find ?
Nothing in logs.
why ?

okmyx · 11-24-2005, 11:29 AM

With out more details there not alot we can help you on.

- what type of files?
- how are you copying them to the server (NFS, Samba, Ftp,....)?
- Distro?
- Which version of Clamd?

tuxrules · 11-24-2005, 12:03 PM

Quote:

I running clamd
clamd
and copy files from eicar.com
and this program don't find virus
if i scan yes ok.
but demon when i copy to server files then don't find ?
Nothing in logs.
why ?

Your post is not clear so I don't entirely understand but I can tell you this that clamd daemon does not provide **on-demand** scanning. This means that it **will not act as Norton AV or other AV on windows** that will actively detect a infected file as it is copied to the hard drive. If you want on-demand scanning you have to use dazuko module (and you will have to install it yourself). To find out how to install dazuko module visit http://www.clamav.net/doc/0.87.1/ and checkout the clamdoc.pdf.

To scan the files

Code:

clamscan -ivr --remove /directory/to/scan

Be careful, the above command will remove any infected files **WITHOUT** asking. For more info,

Code:

man clamscan

Code:

man clamd