[clamav-users] Virusevent is not working

[Micah Snyder (micasnyd)]

Ged, that ticket isn't really relevant anymore and should be closed. In 0.102, the on-access scanning feature is a separate application "clamonacc", as you know, and is simply a client to clamd the same way clamdscan is. As a result, the VirusEvent issue for on-access scanning is fixed and should work just fine.  

In fact, on my laptop I have (although it's off right now) on-access scans of my Windows WSL2 Ubuntu home directory triggering powershell.exe to pop up native Windows notifications when an alert occurs.  It's kinda cool! 

The trick is that whatever your VirusEvent command may be -- the user that `clamd` is running as needs to be able to execute it or you won't see any activity.  In my powershell.exe example, I found that my "clamav" user didn't have the same environment variables and originally couldn't find powershell.exe.  To fix it, Ihad to use a full path to powershell.exe.  Stefan, perhaps the reason VirusEvent isn't working for you is similar. 

-Micah

-----Original Message-----
From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of G.W. Haywood via clamav-users
Sent: Thursday, August 27, 2020 7:07 AM
To: Stefan Malte Schumacher via clamav-users <clamav-users at lists.clamav.net>
Cc: G.W. Haywood <clamav at jubileegroup.co.uk>
Subject: Re: [clamav-users] Virusevent is not working

Hi there,

On Thu, 27 Aug 2020, Stefan Malte Schumacher via clamav-users wrote:

> well, thank to the input from this list clamonacc is now working.

:)

> Unfortunately opening a file with the eicar test signature will not 
> trigger a virusevent.

https://bugzilla.clamav.net/show_bug.cgi?id=12152#c2

-- 

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users at lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml