Anti-Virus Considerations



Install And Enable Anti-Virus Software

Installation of ClamAV

Execute the command below to install Clamav and a tool to send email notificationsapt-get update && apt-get install clamav clamav-freshclam heirloom-mailx

Enable FreshClam for automatic virus definitions updatesservice ClamAV-freshclam start

Do a manual update of the virus definitionfreshclam -v

Configure Daily Scan

Configure ClamAV for daily scans

Create and edit the file clamscan_daily in the folder /etc/cron.daily

Create clamscan_daily

=====================

vi /etc/cron.daily

=====================================

Add below to file changing the option

EMAIL_FROM="from email address";

EMAIL_TO="to email address";

DIRTOSCAN="list of directories";

as required

=====================================

#!/bin/bash

LOGFILE="/var/log/clamav/clamav-$(date +'%Y-%m-%d').log";

EMAIL_MSG="Please see the log file attached.";

EMAIL_FROM="from email address";

EMAIL_TO="to email address";

DIRTOSCAN="list of directories";

for S in ${DIRTOSCAN}; do

 DIRSIZE=$(du -sh "$S" 2>/dev/null | cut -f1);

 echo "Starting a daily scan of "$S" directory.

 Amount of data to be scanned is "$DIRSIZE".";

 clamscan -ri "$S" >> "$LOGFILE";

 # get the value of "Infected lines"

 MALWARE=$(tail "$LOGFILE"|grep Infected|cut -d" " -f3);

 # if the value is not equal to zero, send an email with the log file attached

 if [ "$MALWARE" -ne "0" ];then

 # using heirloom-mailx below

 echo "$EMAIL_MSG"|mail -a "$LOGFILE" -s "Malware Found" -r "$EMAIL_FROM" "$EMAIL_TO";

 fi

done

exit 0