ClamAV安装和使用

核心功能

病毒特征库

基本使用

下载地址：https://www.clamav.net/downloads

github：https://github.com/Cisco-Talos/clamav

安装(Ubuntu)

# 刷软件包索引
sudo apt-get update

sudo apt install clamav

freshclam

sudo dpkg -i clamav-1.5.4.linux.x86_64.deb

创建 clamav 系统用户与组

sudo groupadd -r clamav 2>/dev/null
sudo useradd -r -g clamav -s /usr/sbin/nologin -d /usr/local/share/clamav clamav

把库目录与日志交给它

sudo mkdir -p /usr/local/var/log
sudo touch /usr/local/var/log/freshclam.log
sudo chown -R clamav:clamav /usr/local/share/clamav /usr/local/var/log/freshclam.log

创建最小 freshclam.conf

sudo mkdir -p /usr/local/etc /usr/local/var/log
sudo sh -c 'cat > /usr/local/etc/freshclam.conf <<EOF
DatabaseDirectory /usr/local/share/clamav
DatabaseMirror database.clamav.net
UpdateLogFile /usr/local/var/log/freshclam.log
EOF'

更新病毒库

sudo freshclam

验证：

printf 'X5O!P%%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' > /tmp/eicar.com
clamscan /tmp/eicar.com

更新病毒库

如果没更新，会收到warning

sudo freshclam

扫描

clamscan