1. albatroz

    What tools are behind clamscan

    Recently used cpmalscan to scan a set of wordpress sites and it looks to be very handy so I was wondering what tools are behind them. Any idea?
  2. chanklish

    Using AV clamscan question

    hello i installed av clam and i can scan manually correctly but then i wanted to set a chron job for my domains i used this from the documentation : for i in `awk '!/nobody/{print $2 | "sort | uniq" }' /etc/userdomains | sort | uniq`; do /usr/local/cpanel/3rdparty/bin/clamscan -i -r /home/$i...
  3. J

    SOLVED [CPANEL-20678] ClamAV freshclam and clamscan binaries are different versions.

    We got an email alert from a server that has had the ClamAV plugin installed for at least 5 years (and Manage Plugins' indicates it's properly installed): ClamAV freshclam and clamscan binaries are different versions. Install ClamAV within "Manage Plugins". We just updated to v.66.0.22 last...
  4. Samet Chan

    SOLVED /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings

    I just got received of email here, ERROR: getpatch: Can't download daily-23736.cdiff from ERROR: getfile: Unknown response from (IP: ERROR: Can't download daily.cvd from It's very odd. I never heard this. This is...
  5. J

    Clamd won't start

    I have a VPS server and clamd used to fail and restart every once in a while. Yesterday in WHM, I was presented with a yellow banner telling me to restart for updates to take affect. I restarted and now my CLAMD won't restart. Here's the log shown on the screen after saving in Service...
  6. P

    Two processes of clamd

    Hello everyone, I've just noticed I have 2 processes of clamd running on my server after a reboot. (not same owner and command). I think it's recent, it was not like this few weeks ago. I sent the command "rpm -qa|grep clam" to check if I have 2 installation of clamd and I think it's the case...
  7. C

    Disable automatic scanning and blocking of file manager

    Hey guys, First post here, but have been playing the cpanel/whm game for a while as a hosting security admin. We recently had an issue that I can't for the life of me figure out where to correct/change... Let me describe the issue first' -Stock centos7 server running "release" whm. -Enable...
  8. Fireminds Ltd.

    Problem with internal logger - freshclam.log

    Hi All, I know its ANOTHER one of these threads but I read a few which did not resolve my issue. As per the advice in this thread (Problem with internal logger CLAMAV) I've updated the permissions on my freshclam.log file: Access: (0640/-rw-r-----) Uid: ( 501/ clamav) Gid: ( 501/...
  9. K

    ClamAV installed cannot find clamscan

    I installed ClamAV cannot find clamscan on my server: CENTOS 7.3 x86_64 hyper-v cPanel & WHM 64.0 (build 1 i am trying to setup the cronjob to run scans automatically over night. i was searching for the clamscan as i read in one post to change directory variable but cannot find it. im at a...
  10. U

    SOLVED clamd can't start after /scripts/upcp --force

    Here is the log: LibClamAV Error: yyerror(): /usr/local/cpanel/3rdparty/share/clamav/rfxn.yara line 9897 duplicate identifier "dump_sales_quote_payment" LibClamAV Error: yyerror(): /usr/local/cpanel/3rdparty/share/clamav/rfxn.yara line 11502 duplicate identifier "dump_sales_order" LibClamAV...
  11. N

    SOLVED Configure ClamAV Scanner

    Why Configure ClamAV Scanner open new tab via WHM? Using cPanel & WHM 64.0 (build 4)
  12. Trane Francks

    SOLVED clamd not running after upcp --cron

    Greetings. We're running a soon-to-be retired CloudLinux 5 server with WHM 56.0 (build 43). A few hours ago, upcp --cron ran and a few minutes later I began getting spammed with clamd down messages. Very concerning, I saw the following output from 'clamd --version': ClamAV 0.99/23161/Fri Mar...
  13. M

    Can not upload zip files - Virus detected

    Hello dears Merry Christmas :) I can not upload this file via cpanel file manager Error: I checked file , Many antivirus marked it as OK, No virus detected. This problem occurs for other servers and also other zip files. When I unzip files and upload one by one, cpanel upload them without any...
  14. B

    ClamAV Not Installed Properly

    by mistake i install ClamAV from repository instead of Manage Plugins because it does not appear at Plugins i delete ClamAV from directory and file i install clamav from Manage Plugins but now i can't access subdomains. And subdomains dont work some tips? the error: Template::Exception...
  15. S

    SOLVED How to install clamscan using cpanel script from CLI

    Hi, Can someone please guide me to the backend script to install the clamscan(using cpanel script).
  16. I

    Logs for ClamAV plugin scans?

    Are there any log files of SpamAssassin and LMD when they scan using ClamAV? I am testing signatures for false positives. Thank you.
  17. manokiss

    clamav database directory path

    Hi, im trying to create a sigs exception and im not finding the clamav dbase path, looks like is not the default /var/lib/clamav, can someone please provide me this information? Thanx in advance!
  18. M

    ClamAV installation is OUTDATED! (but not?)

    Running WHM 58.0 (build 31) on CloudLinux 6.7 This is a bit strange. In my daily Logwatch emails I'm receiving the following alert: Last Status: WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.99.1 Recommended version: 0.99.2 DON'T PANIC! Read ClamavNet...
  19. T

    The service “clamd” appears to be down.

    I keep getting this error on my VPS and I will have to say it's a bit out of my skill level to diagnose. Can Someone help? The service “clamd” appears to be down. Server Primary IP Address Service Name clamd Service Status failed Notification The service “clamd”...
  20. D

    ClamAv Claims Something is a Virus That is Not

    I have ConfigServer eXploit Scanner (cxs) scanning files with ClamAV. Last night at about 2AM (presumably when an update was done to the ClamAv signatures) I started getting hundreds of messages that ClamAV has detected a virus - ClamAV detected virus = [Win.Exploit.CVE_2016_3316-1]. After...