アンチウィルスの導入2013/01/16

	アンチウィルスの機能を提供する Clam AntiVirus をインストールします。
[1]	Clamav インストール

[root@dlp ~]#

yum -y install clamav clamav-update

[root@dlp ~]#

vi /etc/freshclam.conf

# 8行目：コメントにする

Example

[root@dlp ~]#

freshclam

# 定義ファイル更新

ClamAV update process started at Wed Jan 16 14:46:13 2013

WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97.5 Recommended version: 0.97.6
DON'T PANIC! Read http://www.clamav.net/support/faq

nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host database.clamav.net (IP: 219.106.242.51)
Trying host database.clamav.net (203.178.137.175)...
Downloading main.cvd [100%]
main.cvd updated (version: 54, sigs: 1044387, f-level: 60, builder: sven)
Downloading daily.cvd [100%]
daily.cvd updated (version: 16502, sigs: 574119, f-level: 63, builder: jesler)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 210, sigs: 39, f-level: 63, builder: neo)
Database updated (1618545 signatures) from database.clamav.net (IP: 203.178.137.175)

[2]	動作確認としてスキャンを実行してみます。

# 試しにスキャンしてみる

[root@dlp ~]#

clamscan --infected --remove --recursive /home

----------- SCAN SUMMARY -----------
Known viruses: 1613147
Engine version: 0.97.5
Scanned directories: 3
Scanned files: 8
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 4.527 sec (0 m 4 s)

# お試し無害ウィルスをダウンロード

[root@dlp ~]#

wget http://www.eicar.org/download/eicar.com

# 試しにスキャンしてみる

[root@dlp ~]#

clamscan --infected --remove --recursive .

# お試しウィルス削除が検出され削除された

./eicar.com: Eicar-Test-Signature FOUND
./eicar.com: Removed.

----------- SCAN SUMMARY -----------
Known viruses: 1613147
Engine version: 0.97.5
Scanned directories: 3
Scanned files: 10
Infected files: 1
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 4.512 sec (0 m 4 s)