{"id":911,"date":"2016-02-02T04:58:41","date_gmt":"2016-02-01T19:58:41","guid":{"rendered":"http:\/\/www.kinryo.net\/?p=911"},"modified":"2021-07-09T06:39:59","modified_gmt":"2021-07-08T21:39:59","slug":"%ef%bc%97%ef%bc%9a%e3%82%a2%e3%83%b3%e3%83%81%e3%82%a6%e3%82%a3%e3%83%ab%e3%82%b9%e3%82%bd%e3%83%95%e3%83%88%e5%b0%8e%e5%85%a5clam-antivirus","status":"publish","type":"post","link":"https:\/\/www.kinryo.net\/?p=911","title":{"rendered":"\uff17\uff1a\u30a2\u30f3\u30c1\u30a6\u30a3\u30eb\u30b9\u30bd\u30d5\u30c8\u5c0e\u5165(Clam AntiVirus)"},"content":{"rendered":"

\u53c2\u8003URL\uff1ahttp:\/\/centossrv.com\/clamav.shtml<\/a>
\n\u3053\u306e\u524d\u306bhttps:\/\/centossrv.com\/epel.shtml<\/a>\u3092\u53c2\u7167\u3057\u3001EPEL\u30ec\u30dd\u30b8\u30c8\u30ea\u30fc\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u4e8b
\n# <\/span>yum -y install clamd<\/span>
\n# <\/span>gedit \/etc\/clamd.conf<\/span><\/p>\n

\n
#User clam\u3000\u2190\u3000\u884c\u982d\u306b#\u3092\u8ffd\u52a0(root\u6a29\u9650\u3067\u52d5\u4f5c\u3059\u308b\u3088\u3046\u306b\u3059\u308b)<\/span><\/code><\/span><\/pre>\n<\/div>\n
Clam AntiVirus\u306e\u8d77\u52d5
\n#<\/span> service clamd start<\/span>
\n#<\/span> chkconfig clamd on<\/span>
\n\u30a6\u30a3\u30eb\u30b9\u5b9a\u7fa9\u30d5\u30a1\u30a4\u30eb\u6700\u65b0\u5316
\n#<\/span> freshclam<\/span><\/p>\n
\n
ClamAV update process started at Mon May  5 14:29:28 2014\r\nmain.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 211.10.155.48)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nTrying host db.jp.clamav.net (203.212.42.128)...\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 203.212.42.128)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nTrying host db.jp.clamav.net (219.94.128.99)...\r\nWARNING: getfile: daily-18354.cdiff not found on remote server (IP: 219.94.128.99)\r\nWARNING: getpatch: Can't download daily-18354.cdiff from db.jp.clamav.net\r\nWARNING: Incremental update failed, trying to download daily.cvd\r\nDownloading daily.cvd [100%]\r\ndaily.cvd updated (version: 18924, sigs: 929974, f-level: 63, builder: neo)\r\nDownloading bytecode.cvd [100%]\r\nbytecode.cvd updated (version: 236, sigs: 43, f-level: 63, builder: dgoddard)<\/span>\r\nDatabase updated (3354242 signatures) from db.jp.clamav.net (IP: 120.29.176.126)<\/span><\/code><\/span><\/pre>\n<\/div>\n
\u6bce\u65e5\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\/etc\/cron.daily\u306b\u81ea\u52d5\u7684\u306b\u51fa\u6765\u305f freshclam \u306b\u3088\u308a\u306a\u3055\u308c\u308b\u3002
\n\u30a6\u30a3\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u30c6\u30b9\u30c8
\n#<\/span> clamscan –infected –remove –recursive<\/span>
\n\u5168\u4f53\u3092\u30b9\u30ad\u30e3\u30f3\u3059\u308b\u306e\u3067\u6642\u9593\u304c\u304b\u304b\u308b\u3002\u30b9\u30ad\u30e3\u30f3\u304c\u7d42\u308f\u308b\u3068\u30b5\u30de\u30ea\u30fc\u304c\u8868\u793a\u3055\u308c\u4f55\u884c\u76ee\u304b\u306b\u3000”Infected files: 0″\u3000\u3068\u8868\u793a\u304c\u3067\u3066\u3044\u308c\u3070OK\u3002
\n\u30c6\u30b9\u30c8\u7528\u306e\u30a6\u30a3\u30eb\u30b9\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3002\uff08\u3082\u3061\u308d\u3093\u5bb3\u306f\u306a\u3044\uff09 : \u306f ; \u306b\u5909\u3048\u3066\u3042\u308b\uff08XOOPS\u306e\u554f\u984c\uff09
\n#<\/span> wget http;\/\/www.eicar.org\/download\/eicar.com<\/span>
\n#<\/span> wget http;\/\/www.eicar.org\/download\/eicar.com.txt<\/span>
\n#<\/span> wget http;\/\/www.eicar.org\/download\/eicar_com.zip<\/span>
\n#<\/span> wget http;\/\/www.eicar.org\/download\/eicarcom2.zip<\/span>
\n\u518d\u5ea6\u30a6\u30a3\u30eb\u30b9\u30c1\u30a7\u30c3\u30af
\n#<\/span> clamscan –infected –remove –recursive<\/span><\/p>\n
\n
\/root\/eicarcom2.zip: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicarcom2.zip: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar.com.txt: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar.com.txt: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar_com.zip: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar_com.zip: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664\r\n\/root\/eicar.com: Eicar-Test-Signature FOUND\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u691c\u77e5\r\n\/root\/eicar.com: Removed\u3000\u2190\u3000\u30a6\u30a3\u30eb\u30b9\u524a\u9664<\/span>\r\n\u4ee5\u4e0b\u7701\u7565<\/code><\/pre>\n<\/div>\n
\u30a6\u30a3\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u5b9a\u671f\u81ea\u52d5\u5b9f\u884c\u8a2d\u5b9a
\n#<\/span> gedit virusscan<\/span><\/p>\n
\n
#!\/bin\/bash\r\nPATH=\/usr\/bin:\/bin\r\n# clamd update yum -y update clamd > \/dev\/null 2>&1\r\n# excludeopt setup\r\nexcludelist=\/root\/clamscan.exclude\r\nif [ -s $excludelist ]; then\r\n    for i in `cat $excludelist`\r\n    do\r\n        if [ $(echo \"$i\"|grep \\\/$) ]; then\r\n            i=`echo $i|sed -e 's\/^\\([^ ]*\\)\\\/$\/\\1\/p' -e d`\r\n            excludeopt=\"${excludeopt} --exclude-dir=^$i\"\r\n        else\r\n            excludeopt=\"${excludeopt} --exclude=^$i\"\r\n        fi\r\n    done\r\nfi\r\n# virus scan<\/span>\r\nCLAMSCANTMP=`mktemp`\r\nclamscan --recursive --remove ${excludeopt} \/ > $CLAMSCANTMP 2>&1\r\n[ ! -z \"$(grep FOUND$ $CLAMSCANTMP)\" ] && \\\r\n# report mail send\r\ngrep FOUND$ $CLAMSCANTMP | mail -s \"Virus Found in `hostname`\" root\r\nrm -f $CLAMSCANTMP<\/span><\/code><\/pre>\n<\/div>\n
#<\/span> chmod +x virusscan<\/span>
\n\u9664\u5916\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fc\u306e\u8a2d\u5b9a\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u9664\u5916\u3059\u308b\u5834\u5408\u306f\u672b\u5c3e\u306b\uff62\/\uff63\u3092\u4ed8\u52a0\u3059\u308b\u3053\u3068
\n#<\/span> echo “\/proc\/” >> clamscan.exclude<\/span>
\n# echo “\/sys\/” >> clamscan.exclude<\/span>
\n\u30b9\u30af\u30ea\u30d7\u30c8\u3092cron.daily\u3078
\n# mv virusscan \/etc\/cron.daily\/<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"
\u53c2\u8003URL\uff1ahttp:\/\/centossrv.com\/clamav.shtml \u3053\u306e\u524d\u306bhttps:\/\/centossrv.com\/epel.shtml\u3092\u53c2\u7167\u3057\u3001EPEL\u30ec\u30dd\u30b8\u30c8\u30ea\u30fc\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u4e8b # yum -y … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"vkexunit_cta_each_option":"","footnotes":""},"categories":[8],"tags":[],"class_list":["post-911","post","type-post","status-publish","format-standard","hentry","category-server"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=911"}],"version-history":[{"count":6,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/911\/revisions"}],"predecessor-version":[{"id":2445,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=\/wp\/v2\/posts\/911\/revisions\/2445"}],"wp:attachment":[{"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kinryo.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}