Linux安装clamav(附基本操作命令)

1、官网下载

地址:https://www.clamav.net/downloads

​wget https://www.clamav.net/downloads/production/clamav-0.104.2.linux.x86_64.rpm

2、安装

rpm -ivh --prefix=/usr/local/clamav clamav-0.104.2.linux.x86_64.rpm

3、添加用户组及创建用户

groupadd clamav
useradd -g clamav clamav

4、创建日志目录和病毒库目录

mkdir -p /usr/local/clamav/logs
mkdir -p /usr/local/clamav/update

5、创建日志文件

touch /usr/local/clamav/logs/clamd.log
touch /usr/local/clamav/logs/freshclam.log

6、文件授权

chown clamav:clamav /usr/local/clamav/logs/clamd.log
chown clamav:clamav /usr/local/clamav/logs/freshclam.log
chown clamav:clamav /usr/local/clamav/update

文件1:clamd.conf

vim /usr/local/clamav/etc/clamd.conf

#Example  //注释掉这一行
#添加以下内容
LogFile /usr/local/clamav/logs/clamd.log
PidFile /usr/local/clamav/update/clamd.pid
DatabaseDirectory /usr/local/clamav/update
文件2:freshclam.conf

vim /usr/local/clamav/etc/freshclam.conf

#Example  //注释掉这一行
#添加以下内容
DatabaseDirectory /usr/local/clamav/update
UpdateLogFile /usr/local/clamav/logs/freshclam.log
PidFile /usr/local/clamav/update/freshclam.pid
将这两个文件复制一下:

cp /usr/local/clamav/etc/*.conf /usr/local/etc/

7、从网络更新病毒库

#在原文基础上加此命令修改权限,否则无法写入日志文件导致无法更新病毒库

chown -R clamav.clamav /usr/local/clamav/

方法1: 在线更新病毒库(该操作贼慢,建议去官网下载文件)

/usr/local/clamav/bin/freshclam

方法2:下载病毒库文件,手动上传到 /usr/local/clamav/update 目录(上面已配置)
下载慢的话,就切换一下网络,或者用手机数据下载。
http://db.cn.clamav.net/daily.cvd
http://db.cn.clamav.net/main.cvd
http://db.cn.clamav.net/safebrowsing.cvd
http://db.cn.clamav.net/bytecode.cvd

8、配置库文件路径

vim /etc/ld.so.conf

#追加一行:
/usr/local/clamav/lib64

更新生效

ldconfig

创建软链接

ln -s /usr/local/clamav/bin/clamscan /usr/local/sbin/clamscan

9、运行使用

/usr/local/clamav/bin/clamscan

10、常用命令

/usr/local/clamav/bin/clamscan        --查杀当前目录下的文件
/usr/local/clamav/bin/clamscan -r     --查杀当前目录的所有文件及目录 
/usr/local/clamav/bin/clamscan dir    --查杀dir目录 
/usr/local/clamav/bin/clamscan -r dir --查杀目录dir下的所有文件及目录
/usr/local/clamav/bin/clamscan -r dir -l /usr/local/clamav/logs/clamd.log  --查杀当前目录的所有文件及目录并且打印出日志


clamscan -r -i /home  --remove  -l /var/log/clamscan.log		#递归扫描home目录,将病毒文件删除,并且记录日志,将有问题的文件都会进行记录
clamscan -r -i /home  --move=/opt/infected  -l /var/log/clamscan.log 		#扫描指定目录,然后将感染文件移动到指定目录,并记录日志

你可能感兴趣的:(Linux,linux,服务器,运维)