// install following packages
[root@mail ~]# yum -y install bzip2-devel zlib-devel gmp-devel curl-devel sendmail-devel
[root@mail ~]# wget http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt
[root@mail ~]# rpm --import RPM-GPG-KEY.dag.txt// import GPG-KEY
[root@mail ~]# rm -f RPM-GPG-KEY.dag.txt
[root@mail ~]# wget http://dag.wieers.com/rpm/packages/clamav/clamav-0.91.2-1.rf.src.rpm
[root@mail ~]# rpm -Uvh clamav-0.91.2-1.rf.src.rpm
@1:clamav################################ [100%]
warning: user dag does not exist - using root
warning: group dag does not exist - using root
warning: user dag does not exist - using root
warning: group dag does not exist - using root
warning: user dag does not exist - using root
warning: group dag does not exist - using root
[root@mail ~]# cd /usr/src/redhat/SPECS
[root@mail SPECS]# rpmbuild -bb clamav.spec// build RPM
[root@mail SPECS]# cd ../RPMS/i386
[root@mail i386]# rpm -Uvh clamav-db-0.91.2-1.rf.i386.rpm
Preparing...################################ [100%]
@1:clamav-db################################ [100%]
[root@mail i386]# rpm -Uvh clamav-0.91.2-1.rf.i386.rpm
Preparing...################################ [100%]
@1:clamav################################ [100%]
[root@ns i386]# cd
[root@mail ~]# vi /etc/freshclam.conf
#NotifyClamd /etc/clamd.conf// line 96: make it comment
[root@mail ~]# freshclam// update policy file
ClamAV update process started at Tue Aug 28 21:50:21 2007
main.cvd is up to date (version: 44, sigs: 133163, f-level: 20, builder: sven)
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 61.205.61.201)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 219.117.246.122)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 219.117.246.50)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 4088, sigs: 16230, f-level: 21, builder: ccordes)
Database updated (149393 signatures) from db.jp.clamav.net (IP: 219.106.242.51)
// erros like above are shown at the first update, but it's no ploblem
[root@mail ~]# clamscan --infected --remove --recursive /home // try to scan
----------- SCAN SUMMARY -----------
Known viruses: 111194
Engine version: 0.90.2
Scanned directories: 23
Scanned files: 33
Infected files: 0
Data scanned: 0.16 MB
Time: 2.721 sec (0 m 2 s)
[root@mail ~]# wget http://www.eicar.org/download/eicar.com // trual virus
Resolving www.eicar.org... 88.198.38.136
Connecting to www.eicar.org|88.198.38.136|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 68 [application/x-msdos-program]
Saving to: `eicar.com'
100%[=======================================>] 68 --.-K/s in 0s
19:26:23 (5.90 MB/s) - `eicar.com' saved [68/68]
[root@mail i386]# clamscan --infected --remove --recursive . // try to scan 2
./eicar.com: Eicar-Test-Signature FOUND
./eicar.com: Removed// removed
----------- SCAN SUMMARY -----------
Known viruses: 111194
Engine version: 0.90.2
Scanned directories: 5
Scanned files: 12
Infected files: 1// just detected
Data scanned: 0.02 MB
Time: 2.599 sec (0 m 2 s)
[root@mail ~]# yum -y install bzip2-devel zlib-devel gmp-devel curl-devel sendmail-devel
[root@mail ~]# wget http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt
[root@mail ~]# rpm --import RPM-GPG-KEY.dag.txt// import GPG-KEY
[root@mail ~]# rm -f RPM-GPG-KEY.dag.txt
[root@mail ~]# wget http://dag.wieers.com/rpm/packages/clamav/clamav-0.91.2-1.rf.src.rpm
[root@mail ~]# rpm -Uvh clamav-0.91.2-1.rf.src.rpm
@1:clamav################################ [100%]
warning: user dag does not exist - using root
warning: group dag does not exist - using root
warning: user dag does not exist - using root
warning: group dag does not exist - using root
warning: user dag does not exist - using root
warning: group dag does not exist - using root
[root@mail ~]# cd /usr/src/redhat/SPECS
[root@mail SPECS]# rpmbuild -bb clamav.spec// build RPM
[root@mail SPECS]# cd ../RPMS/i386
[root@mail i386]# rpm -Uvh clamav-db-0.91.2-1.rf.i386.rpm
Preparing...################################ [100%]
@1:clamav-db################################ [100%]
[root@mail i386]# rpm -Uvh clamav-0.91.2-1.rf.i386.rpm
Preparing...################################ [100%]
@1:clamav################################ [100%]
[root@ns i386]# cd
[root@mail ~]# vi /etc/freshclam.conf
#NotifyClamd /etc/clamd.conf// line 96: make it comment
[root@mail ~]# freshclam// update policy file
ClamAV update process started at Tue Aug 28 21:50:21 2007
main.cvd is up to date (version: 44, sigs: 133163, f-level: 20, builder: sven)
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 61.205.61.201)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 219.117.246.122)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
ERROR: getfile: daily-4016.cdiff not found on remote server (IP: 219.117.246.50)
ERROR: getpatch: Can't download daily-4016.cdiff from db.jp.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 4088, sigs: 16230, f-level: 21, builder: ccordes)
Database updated (149393 signatures) from db.jp.clamav.net (IP: 219.106.242.51)
// erros like above are shown at the first update, but it's no ploblem
[root@mail ~]# clamscan --infected --remove --recursive /home // try to scan
----------- SCAN SUMMARY -----------
Known viruses: 111194
Engine version: 0.90.2
Scanned directories: 23
Scanned files: 33
Infected files: 0
Data scanned: 0.16 MB
Time: 2.721 sec (0 m 2 s)
[root@mail ~]# wget http://www.eicar.org/download/eicar.com // trual virus
Resolving www.eicar.org... 88.198.38.136
Connecting to www.eicar.org|88.198.38.136|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 68 [application/x-msdos-program]
Saving to: `eicar.com'
100%[=======================================>] 68 --.-K/s in 0s
19:26:23 (5.90 MB/s) - `eicar.com' saved [68/68]
[root@mail i386]# clamscan --infected --remove --recursive . // try to scan 2
./eicar.com: Eicar-Test-Signature FOUND
./eicar.com: Removed// removed
----------- SCAN SUMMARY -----------
Known viruses: 111194
Engine version: 0.90.2
Scanned directories: 5
Scanned files: 12
Infected files: 1// just detected
Data scanned: 0.02 MB
Time: 2.599 sec (0 m 2 s)
0 Comments