[clamav-users] ClamAV for Windows

[G.W. Haywood]

Hi there,

On Wed, 21 Oct 2020, Marcy Rogers via clamav-users wrote:

> ... Windows ...

I don't do much with Windows, but I'll try to help.  I'm not sure what
exactly the problem is, but I can see some things on your command line
which might need fixing.

> .\clamdscan.exe . --fdpass -mlv clamd.log "c:\"

Quoting from the clamdscan 'man' page:

" --fdpass
 	Pass the file descriptor permissions to clamd. This is useful
 	if clamd is running as a different user as it is faster than
 	streaming the file to clamd.  Only available if connected to
 	clamd via local(unix) socket.
"

As you're using Windows, you won't be using a local(unix) socket. :/
I suggest you try the command again without the --fdpass argument.

Also, although I'm not sure if it matters on a Windows command line I
would expect that a collection of arguments like

-mlv clamd.log

would be written e.g.

-mvl clamd.log

because otherwise the 'l' might refer to 'v' and not 'clamd.log' (and
clamdscan will also try to scan its own log - maybe that's not such a
good idea).  To be sure I know what I've asked I'll sometimes use the
longer forms of arguments, e.g.

--multiscan --verbose --log=clamd.log

Finally, I don't know if you need quotes around c:\ or not, I doubt it
matters but if unsure I'd try it both with and without them.

I'll let others with experience of using ClamAV on Windows comment on
the fundamentals of what you're doing (such as scanning a filesystem
which contains your logs), but if after trying some of these things
you don't have more luck, do please get back to us.

-- 

73,
Ged.