[clamav-users] clamdscan wasn't found eicar, but clamscan was found

MATSUMOTO ATSUHIRO-OMX matsumoto675 at om-nix.com
Mon Jun 22 10:18:12 UTC 2015


Thank you, Dennis and Matus and all,

I can did it !
I'm just only changed from "clamd at scan" to "clamd.scan" lol

# uname -r
3.10.0-123.el7.x86_64

# cat /etc/redhat-release
CentOS Linux release 7.0.1406 (Core)

# ls -lth /usr/lib/systemd/system/clamd at .service
-rw-r--r-- 1 root root 231  4月 30 03:38 /usr/lib/systemd/system/clamd at .service

# ls -lth /etc/rc.d/init.d/clamd.scan
-rwxr-xr-x 1 root root 138  4月 30 03:46 /etc/rc.d/init.d/clamd.scan

  --> Oh, another permissions, "clamd at .service" and "clamd.scan".


# systemctl stop clamd at scan
# systemctl start clamd.scan

# systemctl status clamd.scan
clamd.scan.service - SYSV: The clamd server running for scan
   Loaded: loaded (/etc/rc.d/init.d/clamd.scan)
   Active: active (running) since 月 2015-06-22 18:55:27 JST; 42s ago
  Process: 3110 ExecStart=/etc/rc.d/init.d/clamd.scan start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/clamd.scan.service
           mq3121 clamd.scan -c /etc/clamd.d/scan.conf --pid /var/run/clamd.scan/clamd.pid

 6月 22 18:54:58 localhost.localdomain clamd[3121]: Self checking every 600 seconds.
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/boot'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/root'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/home/clamav'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/tmp'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Protecting directory '/var/tmp'
 6月 22 18:54:58 localhost.localdomain clamd[3121]: ScanOnAccess: Max file size limited to 5242880 bytes
 6月 22 18:55:27 localhost.localdomain clamd.scan[3110]: Starting clamd.scan: [  OK  ]
 6月 22 18:55:27 localhost.localdomain systemd[1]: Started SYSV: The clamd server running for scan.

  --> I can see "Starting clamd.scan: [  OK  ]".

# ls -lth eicar.com
-rw-r--r-- 1 root root 68  9月  5  2006 eicar.com

# clamdscan -c /etc/clamd.d/scan.conf
/tmp/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 27.225 sec (0 m 27 s)

By the way, What is it difference "clamd at .service" and "clamd.scan" ?

thanks,
om-nix



More information about the clamav-users mailing list