Using clamAV to find phpshell and other ...cool!

[jeroman8]

I happened to notice that ClamAV can find phpshell scripts and other "hacker" tools.
Offcourse you can find it using good find and grep commands etc but this is really great.

If you wanna scan all your clients files for example and save it to a log
in SSH: clamdscan -l scan.txt /home

it save a log named scan.txt (where you are) and check the /home directory.

Really great stuff!

I just used the default installation of clamAV i WHM addons.
Guess the above does the same thing as the scan option you have i cpanel
if you activate it for your clients.

 

[richy]

Good thinking!

Does anyone know how to get this working with Chirpy's MailScanner system (which uses a slightly different version/install setup than cPanels - I currently just get "ERROR: Can't connect to clamd.").

 

[sawbuck]

Use clamscan rather than clamdscan.

 

[jeroman8]

Use clamscan rather than clamdscan.

Why ??

When I do that it does not find everything that clamdscan find.