ClamAV 病毒扫描与安全防护 Print

发布于 2024-06-10

ClamAV 是一款开源的反病毒引擎，可用于 Linux 服务器的恶意软件扫描。

安装 ClamAV

sudo apt update
sudo apt install clamav clamav-daemon
sudo systemctl stop clamav-freshclam
sudo freshclam                    # 更新病毒库
sudo systemctl start clamav-freshclam
sudo systemctl enable clamav-daemon

扫描文件或目录

# 扫描单个文件
clamscan /path/to/file

# 扫描目录
clamscan -r /var/www

# 扫描并自动删除感染文件
clamscan -r --remove /var/www

# 扫描并记录日志
clamscan -r /home --log=/var/log/clamav/scan.log

定时扫描

# crontab -e 添加
0 4 * * 0 /usr/bin/clamscan -r /var/www --log=/var/log/clamav/weekly.log

配合 Fail2ban 使用

[clamav]
enabled = true
filter = clamav
logpath = /var/log/clamav/scan.log
maxretry = 1
bantime = 86400