clamav: what happens when it finds a virus?
 

Hey

I have just installed clamav on my file server.

I ran a scan on my home folder and found nothing.

I was curious to know what clamav does when it finds a virus, and how it notifies me if I run it as a cronjob every evening.

Will it email me?

Does it move the infected file somewhere? I don't remember setting a quarentine directory.

hamish

it depents on the options you pass to clamav. It can delete, rename, ignore, desinfect the file.
see man clamav


it generate a report.

if you want to get a mail from clamav run the script as a cronjob (customize the emailaddress, what to scan, what to exclude etc):

#!/bin/bash
cat /dev/null > /root/clamavscan.log
/usr/bin/clamscan -i -r --log /root/clamavscan.log --exclude=samba /home > /dev/null 2>&1
cat /root/clamavscan.log | mail -s "ClamAV scan /home without Samba: `date`" root