Friday, February 11, 2011

Set-up ClamAV on Ubuntu

sudo apt-get install clamav

sudo freshclam


which will install the ClamAV antivirus program and download its database of virus signatures. (In the future, Ubuntu will automatically run freshclam to update the database every day.)

Now let's suppose you're exporting a directory called /home/me/publicdata to your Windows users. You can scan that directory by typing

sudo clamscan -r /home/me/publicdata

and see what it reports. You can tell clamscan to remove infected files automatically (type "man clamscan" for details), but I suggest the first time out you look at the clamscan report and determine for yourself what files look suspicious.

After you've cleaned everything up, you'll probably want to run clamscan every day, or if your users are out of control, every hour. Here's a simple script that runs clamscan and mails a report to the address in NOTIFY. Replace "me@example.com" with the address to which you want reports to be sent, and "/home/me/publicdata" with the directory you want scanned (clamscan will automatically examine all the subdirectories of this directory as well):

#!/bin/sh
TARGET=/home/me/publicdata
NOTIFY=me@example.com

clamscan -r $TARGET 2>&1 | mail -s 'Clamscan report' $NOTIFY

(You may not have the "mail" program installed. Run "sudo apt-get install bsd-mailx" if it's missing.)

Use an editor to create that file in /usr/local/sbin. I recommend the nano editor because it has help menus. At the prompt in a Terminal, type

sudo nano /usr/local/sbin/virusscan.sh

then copy the code above into that file. Hold down the Ctrl key and type S; say "yes" to save the file, then hold down Ctrl and type X to exit nano.

Only two more tasks await. First, you must make the script executable by running the command:

sudo chmod u+x,go-x /usr/local/sbin/virusscan.sh

This will allow the "root" (administrative) user, and only the root user, to execute this script. Finally, to make this script run every hour, you should create a "symbolic link" to the file (rather like a Windows "shortcut") in the directory /etc/cron.hourly like this:

sudo cd /etc/cron.hourly
sudo ln -s /usr/local/sbin/virusscan.sh

This will run the script once each hour. (You can limit it to once a day by replacing "cron.hourly" with "cron.daily" above.)


Source : http://ubuntuforums.org/showthread.php?t=1580738

Clamscan Option : http://linux.die.net/man/1/clamscan

Howto Install Clam AntiVirus with GTK frontend GUI : http://www.ubuntugeek.com/howto-install-clam-antivirus-with-gtk-frontend-gui.html

1 comment:

  1. crackstools is a hub of software cracking tools including protection against the manipulation of software, serial number, hardware key, date checks etc. You can find full version software, activation keys, serial key, and license keys for lifetime, crack, patch, keygen in crackstools with easy download source.http://crackstools.com

    ReplyDelete