ClamAV

1. Information

ClamAV is an on-access virus scanner and not a real-time scanner. The ClamAV daemon (clamd) can be used for scanning incoming files automatically, (e.g. mails) without having to scan them manually with ClamAV. Lots of programs, especially e-mail servers, can connect to a ClamAV daemon. This speeds up virus scanning as the program is always in memory.

2. Linux

2.1. Installation

See https://www.rosehosting.com/blog/how-to-install-clamav-on-debian-9-and-scan-for-vulnerabilities.

Enter the following commands at a Command Line.

sudo apt-get install clamav
sudo apt-get install clamav-daemon
sudo apt-get install libclamunrar

sudo systemctl start clamav-daemon

systemctl status clamav-daemon
systemctl status clamav-freshclam

2.2. Usage

Enter the following commands at a Command Line.

curl https://www.eicar.org/download/eicar.com.txt | clamscan -
curl https://www.eicar.org/download/eicar.com.txt | clamdscan -

curl https://www.eicar.org/download/eicar.com.txt > eicar.com.txt
clamscan eicar.com.txt
clamdscan eicar.com.txt
clamdscan --remove eicar.com.txt

3. Windows

3.1. Installation

See https://www.clamav.net/documents/installing-clamav-on-windows.

Run the ClamAV-0.103.2.exe file with administrative privileges.
Choose I accept the agreement.
Click Next.
Click Next.
Click Install.
Uncheck Open the User Manual in the default browser.
Click Finish.

3.2. Configuration

Enter the following commands at a Command Prompt with administrative privileges.

cd "C:\Program Files\ClamAV"
copy conf_examples\freshclam.conf.sample freshclam.conf
copy conf_examples\clamd.conf.sample clamd.conf
copy freshclam.conf freshclam.conf.org
copy clamd.conf clamd.conf.org
rem Remove the Example line from the freshclam.conf file.
rem Remove the Example line from the clamd.conf file.

rem Download the signature databases.
freshclam.exe
freshclam.exe

Note: To be able to use ClamAV in the Command Prompt, the installation folder needs to be added to the PATH system environment variable.
Open Control Panel > System.
Select Advanced system settings.
Select the Advanced tab.
Click Environment Variables.
Select System variables > Path.
Click Edit.
Click New.
Type C:\Program Files\ClamAV.
Click OK.
Click OK.
Click OK.
Close System.

3.3. Usage

Enter the following commands at a Command Prompt.

curl https://www.eicar.org/download/eicar.com.txt > eicar.com.txt
clamscan.exe eicar.com.txt
clamscan.exe --remove eicar.com.txt