Antivir hbedv.key

webwolf70 · 09-15-2005, 11:50 PM

I am using Suse 9.3 Pro. I decided to install antivir and give it a try. I went to the website and registered. I recieved an email all in German. So I found an online translator and the files they sent me don't tell me what to do with the hbedv.key. Can someone tell me where I am suppose to stick that? Uhm, and be nice, lol.

Also I am getting this when I try to update it.

"hank you for using AntiVir.
linux:/home/webwolf # antivir --update
AntiVir / Linux Version 2.1.3-16 +gui
Copyright (c) 1994-2005 by H+BEDV Datentechnik GmbH.
All rights reserved.

Warning: the file "antivir.vdf" is more than 14 days old

--update has been disabled.
"

Webwolf

Gibsonist · 09-16-2005, 05:40 AM

OK - the translation starts -

(basically all is taken from this page http://www.free-av.de/cgi-bin/ubb/ul...&f=19&t=000661 )

Copy the file "HBEDV.KEY" into "/usr/lib/AntiVir" and rename it to "hbedv.key"

Change it with "chmod 644 hbedv.key" and "chown root:root hbedv.key"

Open "/etc/sysconfig/antivir" in your editor
-> Change the AVGUARD_TYPE entry from "server" to "workstation"

- YAST
-> System: Editor for /etc/sysconfig-files
Entry System -> Kernel -> MODULES_LOADED_ON_BOOT
Before "capability" enter the Modul "dazuko"
"dazuko capability ..."

- YAST
-> System: Runlevel-Editor
Enter advanced mode
Activate service "avguard" and also on Runlevel 3 and 5

reboot your System

Update the AV by "antivir --update" (as root)

Start the AV by "/etc/init.d/avguard start" (as root)

The Scanner should now run in the background.
Test (as root):
"ps aux | grep antivir"
should roughly return something like:
/usr/lib/AntiVir/antivir --workstation
/usr/lib/AntiVir/antivir --workstation
/usr/lib/AntiVir/antivir --workstation

To update the AV's db run "antivir --update"
Manual scan can be done by "antivir -s /path"

Hope it helps, sorry for the rough translation - ClamAV is also worth a look if you are looking for a AV system.

webwolf70 · 09-16-2005, 08:20 PM

Everything worked great until I went to update it.

"linux:/home/webwolf # antivir --update
AntiVir / Linux Version 2.1.3-16 +gui
Copyright (c) 1994-2005 by H+BEDV Datentechnik GmbH.
All rights reserved.

Warning: the file "antivir.vdf" is more than 14 days old

--update has been disabled.

"

I wonder if I can get the newest antivir.vdf and manually install it. I will have to look. Thanks.

Webwolf

webwolf70 · 09-16-2005, 08:22 PM

One more thing I noticed. The above error I mentioned I did as root.

When I try it as a normal user I get this message.

"Warning: the file "antivir.vdf" is more than 14 days old
checking for updates

06.30.00.03 <=> 06.32.00.15 [vdf database, loaded]
06.30.00.03 <=> 06.32.00.15 [vdf database, on-disk]
06.30.00.02 <=> 06.32.00.03 [scan engine, running]
06.30.00.02 <=> 06.32.00.03 [scan engine, on-disk]

error: no write access to /usr/lib/AntiVir/
"

So I am going to log out and log back in under root, with out su'ing in Konsole, and see if this makes a difference.

Webwolf

webwolf70 · 09-16-2005, 09:16 PM

I DID IT.

I re-did the steps above but this time I manually put the antivir.vdf in the AntiVir directory. After that I uncommented several lines in the etc/antivir.conf (which is pretty self explanitory) Rebooted and tried it again. It worked

I have it so it will check every two hours for updates. Hopefully that will work correctly. If not at least I got the manual --update working.

I suppose there would have been an easier program to set up but I put a lot into this and I hate to give up so easily, lol.

Webwolf

raysr · 03-21-2006, 04:40 PM

I've been trying to follow along here but have ran aground. I'm still getting the 14 days old error. I changed server to workstation and the key was already in /usr/lib and renamed in lower case. Yast>System>Anti Virus>AVGUARD_TYPE-workstation-DAZUKO_MODULE-Dazuko capability. Kernel> MODULES_LOADED_ON_BOOT is where I'm lost. When I run "/etc/init.d/avguard start" (as root)" I get "/etc/init.d/avguard start
Dazuko module 'dazuko capability' not existing.
Warning: the file "antivir.vdf" is more than 14 days old
checking for updates

06.30.00.03 <=> 06.34.00.80 [vdf database, loaded]
06.30.00.02 <=> 06.34.00.14 [scan engine, running]

error: no write access to /usr/lib/AntiVir/

Warning: the file "antivir.vdf" is more than 14 days old

--update has been disabled.

Gibsonist · 03-21-2006, 05:21 PM

What happens if you run

Code:

antivir --update

as root.
this normally updates your scan engine and vdf.

Normal users don't have the priv to touch the vdfs ( as it should be)

Also try to run

Code:

modprobe dazuko

before starting avguard

raysr · 03-21-2006, 05:50 PM

modprobe dazuko
FATAL: Error inserting dazuko (/lib/modules/2.6.11.4-20a-default/extra/dazuko.ko): Invalid argumentantivir --update
AntiVir / Linux Version 2.1.3-16 +gui
Copyright (c) 1994-2005 by H+BEDV Datentechnik GmbH.
All rights reserved.

Warning: the file "antivir.vdf" is more than 14 days old

--update has been disabled.

raysr · 03-21-2006, 06:56 PM

Apparently Dazuko wasn't compiled. I installed the kernel source then tried to compile dazuko and got this error:
linux:/usr/src/kernel-modules/dazuko # ./configure
checking host system type... Linux
kernel source in /lib/modules/2.6.11.4-20a-default/build... yes
acquiring Linux kernel code configuration... error
error: unable to compile linux_conf utility
please see `linux_conf_make.out' for details
linux:/usr/src/kernel-modules/dazuko #

It says that the "sbin/sh cc: command not found" (in linux_conf_make.out)

Gibsonist · 03-23-2006, 02:21 PM

Quote:

It says that the "sbin/sh cc: command not found" (in linux_conf_make.out)

seems as if you dont have a compiler installed - try adding gcc in yast.

As for the --update is an invalid option, I dont take that as it always has worked for me.

here the results from

Code:

antivir --help

Code:

Usage is: antivir [options] [path[\*.ext]] [*.ext]
where options are:
 --help .......... display this help text (abbreviation: -h or -?)
 --scan-mode=<mode> applies "extlist", "smart" or "all" scan methods
 --allfiles ...... synonymous for --scan-mode=all
 --version ....... show version information
 --info .......... show list of recognized forms
 --update ........ update AntiVir
 --check ......... used with --update to check for updates
 --temp=<dir> .... specify the directory for temporary files
 --pid-dir=<dir> . specify the directory for PID files
 --home-dir=<dir>  location of executable, VDF and key files
 -C <filename> ... name of configuration file (default /etc/antivir.conf)
 -s .............. scan subdirectories
 --scan-in-archive files in archives will be extracted and scanned
 -z .............. synonymous for --scan-in-archive (scan in archives, too)
 --archive-max-size=N, --archive-max-recursion=N, --archive-max-ratio=N
                   anti DoS feature: do not scan archive content which would
...

raysr · 03-23-2006, 04:08 PM

When Yast installs "Dazuko" does it compile it too, or is that something else needs to be done?

Gibsonist · 03-23-2006, 04:24 PM

Last time I looked you had to compile it for yourself and yast only installed the sources.

raysr · 03-23-2006, 05:26 PM

That's what I thought. Thanks.