{"id":1096,"date":"2016-05-13T12:54:09","date_gmt":"2016-05-13T03:54:09","guid":{"rendered":"http:\/\/www.kinryo.net\/?p=1096"},"modified":"2016-05-13T13:06:20","modified_gmt":"2016-05-13T04:06:20","slug":"%ef%bc%91%ef%bc%97%ef%bc%9a%e3%82%b5%e3%83%96%e3%83%9b%e3%82%b9%e3%83%88%e3%81%ae%e8%a8%ad%e5%ae%9a%ef%bc%94%e3%80%81%e3%82%a2%e3%83%b3%e3%83%81%e3%82%a6%e3%82%a3%e3%83%ab%e3%82%b9%e3%82%bd%e3%83%95","status":"publish","type":"post","link":"https:\/\/www.kinryo.net\/?p=1096","title":{"rendered":"\uff11\uff17\uff1a\u30b5\u30d6\u30db\u30b9\u30c8\u306e\u8a2d\u5b9a\uff14\u3001\u30a2\u30f3\u30c1\u30a6\u30a3\u30eb\u30b9\u30bd\u30d5\u30c8\u5c0e\u5165(Clam AntiVirus)"},"content":{"rendered":"

\u53c2\u8003URL\uff1ahttp:\/\/centossrv.com\/clamav.shtml<\/a>
\n#<\/span> yum -y install clamd<\/span><\/p>\n

EPEL\u30ec\u30dd\u30b8\u30c8\u30ea\u30fc\u3092\u6709\u52b9\u306b\u3057\u3066\u7f6e\u304b\u306a\u3044\u3068\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u51fa\u6765\u306a\u3044
\n#<\/span> gedit \/etc\/clamd.conf<\/span><\/p>\n

\n
#User clam<\/span>\u3000\u2190\u3000\u884c\u982d\u306b#\u3092\u8ffd\u52a0(root\u6a29\u9650\u3067\u52d5\u4f5c\u3059\u308b\u3088\u3046\u306b\u3059\u308b)<\/code><\/pre>\n<\/div>\n
Clam AntiVirus\u306e\u8d77\u52d5
\n#<\/span> service clamd start<\/span>
\n#<\/span> chkconfig clamd on<\/span>
\n\u30a6\u30a3\u30eb\u30b9\u5b9a\u7fa9\u30d5\u30a1\u30a4\u30eb\u6700\u65b0\u5316
\n#<\/span> freshclam<\/span><\/p>\n
\n
ClamAV update process started at Mon May  5 14:29:28 2014\r\nmain.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 211.10.155.48)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nTrying host db.jp.clamav.net (203.212.42.128)...\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 203.212.42.128)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nTrying host db.jp.clamav.net (219.94.128.99)...\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 219.94.128.99)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nWARNING: Incremental update failed, trying to download daily.cvd\r\nDownloading daily.cvd [100%]\r\ndaily.cvd updated (version: 18924, sigs: 929974, f-level: 63, builder: neo)\r\nDownloading bytecode.cvd [100%]\r\nbytecode.cvd updated (version: 236, sigs: 43, f-level: 63, builder: dgoddard)\r\nDatabase updated (3354242 signatures) from db.jp.clamav.net (IP: 120.29.176.126)<\/span><\/code><\/pre>\n<\/div>\n
\u6bce\u65e5\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\/etc\/cron.daily\u306b\u81ea\u52d5\u7684\u306b\u51fa\u6765\u305f freshclam \u306b\u3088\u308a\u306a\u3055\u308c\u308b\u3002
\n\u30a6\u30a3\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u30c6\u30b9\u30c8
\n#<\/span> clamscan –infected –remove –recursive<\/span>
\n\u5168\u4f53\u3092\u30b9\u30ad\u30e3\u30f3\u3059\u308b\u306e\u3067\u6642\u9593\u304c\u304b\u304b\u308b\u3002\u30b9\u30ad\u30e3\u30f3\u304c\u7d42\u308f\u308b\u3068\u30b5\u30de\u30ea\u30fc\u304c\u8868\u793a\u3055\u308c\u4f55\u884c\u76ee\u304b\u306b\u3000”Infected files: 0″\u3000\u3068\u8868\u793a\u304c\u3067\u3066\u3044\u308c\u3070OK\u3002
\n\u30c6\u30b9\u30c8\u7528\u306e\u30a6\u30a3\u30eb\u30b9\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3002
\n#<\/span> wget http:\/\/www.eicar.org\/download\/eicar.com<\/span>
\n#<\/span> wget http:\/\/www.eicar.org\/download\/eicar.com.txt<\/span>
\n#<\/span> wget http:\/\/www.eicar.org\/download\/eicar_com.zip<\/span>
\n#<\/span> wget http:\/\/www.eicar.org\/download\/eicarcom2.zip<\/span>
\n\u518d\u5ea6\u30a6\u30a3\u30eb\u30b9\u30c1\u30a7\u30c3\u30af
\n#<\/span> clamscan –infected –remove –recursive<\/span><\/p>\n
\n
\/root\/eicarcom2.zip: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicarcom2.zip: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar.com.txt: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar.com.txt: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar_com.zip: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar_com.zip: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar.com: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar.com: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664<\/span>\r\n\u4ee5\u4e0b\u7701\u7565<\/code><\/span><\/pre>\n<\/div>\n
\u30a6\u30a3\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u5b9a\u671f\u81ea\u52d5\u5b9f\u884c\u8a2d\u5b9a
\n#<\/span> gedit virusscan<\/span><\/p>\n
\n
#!\/bin\/bash\r\nPATH=\/usr\/bin:\/bin\r\n# clamd update yum -y update clamd > \/dev\/null 2>&1\r\n# excludeopt setup\r\nexcludelist=\/root\/clamscan.exclude\r\nif [ -s $excludelist ]; then\r\n    for i in `cat $excludelist`\r\n    do\r\n        if [ $(echo \"$i\"|grep \\\/$) ]; then\r\n            i=`echo $i|sed -e 's\/^\\([^ ]*\\)\\\/$\/\\1\/p' -e d`\r\n            excludeopt=\"${excludeopt} --exclude-dir=^$i\"\r\n        else\r\n            excludeopt=\"${excludeopt} --exclude=^$i\"\r\n        fi\r\n    done\r\nfi\r\n# virus scan\r\nCLAMSCANTMP=`mktemp`\r\nclamscan --recursive --remove ${excludeopt} \/ > $CLAMSCANTMP 2>&1\r\n[ ! -z \"$(grep FOUND$ $CLAMSCANTMP)\" ] && \\\r\n# report mail send\r\ngrep FOUND$ $CLAMSCANTMP | mail -s \"Virus Found in `hostname`\" root\r\nrm -f $CLAMSCANTMP<\/span><\/code><\/pre>\n<\/div>\n
#<\/span> chmod +x virusscan<\/span>
\n\u9664\u5916\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fc\u306e\u8a2d\u5b9a\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u9664\u5916\u3059\u308b\u5834\u5408\u306f\u672b\u5c3e\u306b\uff62\/\uff63\u3092\u4ed8\u52a0\u3059\u308b\u3053\u3068
\n#<\/span> echo “\/proc\/” >> clamscan.exclude<\/span>
\n#<\/span> echo “\/sys\/” >> clamscan.exclude<\/span>
\n\u30b9\u30af\u30ea\u30d7\u30c8\u3092cron.daily\u3078
\n#<\/span> mv virusscan \/etc\/cron.daily\/<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"
\u53c2\u8003URL\uff1ahttp:\/\/centossrv.com\/clamav.shtml # yum -y install clamd EPEL\u30ec\u30dd\u30b8\u30c8\u30ea\u30fc\u3092\u6709\u52b9\u306b\u3057\u3066\u7f6e\u304b\u306a\u3044\u3068\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u51fa\u6765\u306a\u3044 # gedit \/etc\/cl … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"vkexunit_cta_each_option":"","footnotes":""},"categories":[8],"tags":[],"class_list":["post-1096","post","type-post","status-publish","format-standard","hentry","category-server"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/1096","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1096"}],"version-history":[{"count":4,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/1096\/revisions"}],"predecessor-version":[{"id":1100,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/1096\/revisions\/1100"}],"wp:attachment":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1096"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1096"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1096"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}