1. M

    Clamav error when updating

    hi i'm receiving email notifications saying the auto update for clamav failed Cron <[email protected]> /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings ERROR: getpatch: Can't download daily-26099.cdiff from if i try to manually update, i get the following output...
  2. M

    Sanesecurity.Badmacro.Doc.vbfexe.UNOFFICIAL clamav false positive

    I am currently having problems receiving emails from a customer because their attachments are triggering this rule in EXIM (Sanesecurity.Badmacro.Doc.vbfexe.UNOFFICIAL) so I was wondering if there is a way to disable only the problematic rule
  3. M

    SOLVED clamd and clamav fail after updating to

    After updating from to this morning - clamd and clamav are down on my servers :( Notification The service “clamav” appears to be down. Service Check Method The system’s command to check or to restart this service failed. Notification The service “clamd” appears to be...
  4. L

    Do I still require ClamAV plugins in WHM/cPanel when I already have it installed it in CentOS7?

    Hi All, Can anyone advise if I am posting in the right Forum for ClamAV issue? If not, please advise. I just want to know if I still require ClamAV Plugins install in WHM/cPanel when I already had ClamAV installed in my CentOS 7? Do ClamAV in WHM/cPanel work separately from clamAV in CentOS...
  5. R

    ClamAV update error from cron

    Hi, I get this email notification everyday that ClamAV fails to update. Cron <[email protected]> /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings ERROR: getpatch: Can't download daily-26096.cdiff from ERROR: Can't download daily.cvd from However...
  6. T

    Virus on cPANEL

    Hi everybody l have an issue, l have some account on my WHM, l wanna scan those account with virus scan from cPanel, and l notice that on one of account l am not getting directory structure for scanning example: Scan Entire Home Directory Scan Mail Scan Public FTP Space Scan Public...
  7. J

    SOLVED clamav scan times vs. cron scan times

    Hello. Activated clamav and see that in the control panel there is no setting on *when* to have it run when it does scan. Alternatively there is a cron job I have (below) that does what I want (except sending me emails about the results). So if I shut down the GUI clamav settings, i.e, untick...
  8. G

    Manual scan with ClamAV on CentOS 6

    It's been a long time since I had to use this, but due to some recent cracker activity I reinstalled it via WHM on CentOS 6. I expected to get an email report on anything it found, but so far haven't gotten anything. Since it takes up a lot of space and makes the server run slow, I'd like to...
  9. M

    Any progress toward ClamAV 0.102.x ?

    I know that when ClamAV introduced the clamonacc utility in 0.102.0 ClamAV 0.102.0 has been released , it posed an issue of how the cPanel development team would approach adapting it into cPanel's ClamAV , but it's been a year now since 0.102.0 released so I'm just wondering if there's been any...

    ClamAV version 0.102.2

    Need Clamav updated to latest stable version 0.102.2. Which cPanel version support clamav version 0.102.2 ?
  11. G

    SOLVED [CPANEL-28012] Incomplete ClamAV Plugin Uninstall

    After uninstalling ClamAV plugin my Exim logs are flooded with messages like this: malware acl condition: clamd /var/clamd : unable to connect to UNIX socket (/var/clamd): No such file or directory I tried to comment out the av_scanner line from /etc/exim.conf but then a different message...
  12. N

    SOLVED Update fails due to RPM conflict on clamAV

    The regular cPanel/WHM update script has been failing for a few days due to a clamAV RPM conflict. [2019-05-31 01:59:52 -0700] Testing RPM transaction [2019-05-31 01:59:54 -0700] file /etc/rc.d/init.d/clamd from install of cpanel-clamav-0.101.2-1.cp1180.x86_64 conflicts with file from package...
  13. F

    ClamAV not filtering incoming mail

    Hi! Using CPanel 78.0.16 on CloudLinux 7.6, with ClamAV Version: 0.100.2-1.cp1170 How can I scan incoming email for malware? Spamassassin is installed, but it's not blocking virus. Thanks!
  14. DennisMidjord

    ClamAV installed in different path

    Hi. We just had an issue where freshclam would run for an hour with high CPU usage on most servers - except for 2. I read that killing freshclam, deleting daily.cld and starting freshclam again would solve the issue. When running killall /usr/bin/freshclam, two of our servers said the file...
  15. keat63

    CLAMAV not working as expected

    Just of late, I've had a number of word macro virus being delivered to a users mailbox. I have CLAMAV installed, but for what ever reason, this rarely detects virus. Last week, I conducted a few Eicar tests, these were picked up, so I guess CLAMAV is working, but not working to effect. Any...
  16. M

    SOLVED Scan All Accounts with ClamAV?

    Hello. I have installed clamav plugin from WHM. Now I want to scan all accounts, or say 50 accounts at a time. How can i do that if I am the server owner? I know users can scan their own accounts by logging to their cpanel. Can i scan their accounts without logging to their cpanel one by one? Is...
  17. D

    How to remove clamav additional databases

    Hi Team, I initially amended this file /usr/local/cpanel/3rdparty/etc/freshclam.conf and added for example additional cdb / databases example: DatabaseCustomURL http://LinkRemoved/sanesecurity/foxhole_js.cdb DatabaseCustomURL http://LinkRemoved/sanesecurity/foxhole_js.ndb DatabaseCustomURL...
  18. P

    ClamAV duplicate database Warning

    Hi, I have just got the following warning using clamav? LibClamAV Warning: Detected duplicate databases /usr/local/cpanel/3rdparty/share/clamav/bytecode.cld and /usr/local/cpanel/3rdparty/share/clamav/bytecode.cvd. The /usr/local/cpanel/3rdparty/share/clamav/bytecode.cld database is older and...
  19. V

    SOLVED [CPANEL-21749] ClamAV version 0.100.1

    Hello, Title says it all. This version of clamav was released on July 9th and includes security fixes. When will this be pushed out by cpanel? Thanks
  20. Hedloff

    ClamAV on mdbox instead of maildir

    Hello, How does clamav scan work on mdbox? On maildir it will remove a email that is infected in the same folder when running command: clamscan -ri --remove But in mdbox the emails are compressed togheter in same file, how will that work?