• Тестовый вирус

!!! Требуется не меньше 1024Mb RAM !!! 

root@gate:~# apt install clamav-daemon

• Install and Configure ClamAV on CentOS 7

root@gate:~# less /etc/clamav/clamd.conf

root@gate:~# service clamav-freshclam stop

root@gate:~# rm /var/lib/clamav/freshclam.dat

root@gate:~# cat /etc/clamav/freshclam.conf

...
HTTPProxyServer gate.isp.un
HTTPProxyPort 3128

root@gate:~# service clamav-freshclam start

ИЛИ

root@gate:~# wget -O /var/lib/clamav/main.cld https://val.bmstu.ru/unix/clamav/main.cld
root@gate:~# wget -O /var/lib/clamav/daily.cld https://val.bmstu.ru/unix/clamav/daily.cld

root@gate:~# ls /var/lib/clamav/

root@gate:~# service clamav-daemon start

root@gate:~# ls -l /var/run/clamav/clamd.ctl

$ cd /tmp

$ wget http://gate.isp.un/unix/virus.zip

$ clamdscan virus.zip

• !!! Проверяет только в момент чтения, НЕ записи!
• On-Access Scanning
• Configuring On-Access Scanning in ClamAV
• Модуль AppArmor

$ cat /boot/config-`uname -r` | grep FANOTIFY

# cat /etc/clamav/clamd.conf

...
OnAccessIncludePath /disk2
OnAccessPrevention yes
OnAccessExcludeUname clamav

# clamonacc

# tail -f /var/log/clamav/clamav.log