document
view system log
1
sudo zgrep CRON /var/log/syslog*
view calmav logs
1
less /var/log/clamav/clamav.log
check config
1
clamconf
view docekr logs
1
sudo docker logs fb8845be6263
diable clamav-daemon
https://stackoverflow.com/questions/61496984/cant-stop-clamav-deamon-in-linux
1 2 3 4 5
sudo systemctl stop clamav-daemon sudo systemctl disable clamav-daemon sudo systemctl status clamav-daemon sudo /etc/init.d/clamav-daemon stop
Check for new database 0 times a day
1 2 3 4
sudo vim /etc/clamav/freshclam.conf TestDatabases yes -> no Checks 24 -> Checks 0
1 2 3 4 5 6 7 8 9 10 11 12 13
sudo vim /etc/clamav/clamd.conf ScanMail true -> false ScanArchive true -> false SelfCheck 3600 -> 0 ScanPE true -> false ScanOLE2 true -> false ScanPDF true -> false ScanHTML true -> false ScanSWF true -> false ScanELF true -> false ScanXMLDOCS true -> false ScanHWP3 true -> false
→
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
ubuntu@camaro003:~$ sudo systemctl status clamav-daemon ● clamav-daemon.service - Clam AntiVirus userspace daemon Loaded: loaded (/lib/systemd/system/clamav-daemon.service; disabled; vendor preset: enabled) Drop-In: /etc/systemd/system/clamav-daemon.service.d └─extend.conf Active: inactive (dead) Docs: man:clamd(8) man:clamd.conf(5) https://www.clamav.net/documents/ Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> PDF support disabled. Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> SWF support disabled. Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> HTML support disabled. Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> XMLDOCS support disabled. Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> HWP3 support disabled. Jun 09 01:45:51 camaro003 clamd[5179]: Wed Jun 9 01:45:51 2021 -> Self checking disabled. Jun 09 01:46:03 camaro003 systemd[1]: Stopping Clam AntiVirus userspace daemon... Jun 09 01:46:05 camaro003 clamd[5179]: Wed Jun 9 01:46:05 2021 -> --- Stopped at Wed Jun 9 01:46:05 2021 Jun 09 01:46:05 camaro003 clamd[5179]: Wed Jun 9 01:46:05 2021 -> Socket file removed. Jun 09 01:46:05 camaro003 systemd[1]: Stopped Clam AntiVirus userspace daemon.
clamd.conf options
https://manpages.debian.org/jessie/clamav-daemon/clamd.conf.5.en.html