【防病毒】Clamav杀毒软件离线安装部署

前置：准备好clamav安装文件，三个病毒库文件
clamav安装文件
https://www.clamav.net/downloads

clamav病毒库文件：
http://database.clamav.net/main.cvd
http://database.clamav.net/daily.cvd
http://database.clamav.net/bytecode.cvd

1、添加用户组和组成员
groupadd clamav
useradd -g clamav -s /bin/false -c “Clam AntiVirus” clamav
2、执行安装命令
rpm -ivh clamav*.rpm
3、创建日志和病毒库目录
mkdir /usr/local/clamav
mkdir /usr/local/clamav/logs
mkdir /usr/local/clamav/update
4、创建日志文件
touch /usr/local/clamav/logs/clamd.log
touch /usr/local/clamav/logs/freshclam.log
5、文件授权
chown clamav:clamav /usr/local/clamav/logs/clamd.log
chown clamav:clamav /usr/local/clamav/logs/freshclam.log
chown -R clamav:clamav /usr/local/clamav/update
6、修改配置文件clamd.conf
如果目录下不存在可以手工命令创建
方法1：
clamconf -g freshclam.conf > freshclam.conf
clamconf -g clamd.conf > clamd.conf
clamconf -g clamav-milter.conf > clamav-milter.conf

方法2：
touch freshclam.conf
touch clamd.conf
touch clamav-milter.conf
cp -rf /usr/local/etc/clamd.conf.sample /usr/local/etc/clamd.conf
sed -i ‘8s|Example|#Example|’ /usr/local/etc/clamd.conf
cat << EOF >> /usr/local/etc/clamd.conf
DatabaseDirectory /var/lib/clamav
TCPSocket 3310
TCPAddr 127.0.0.1
EOF

7、修改配置文件freshclam.conf
cp -rf /usr/local/etc/freshclam.conf.sample /usr/local/etc/freshclam.conf
sed -i ‘8s|Example|#Example|’ /usr/local/etc/freshclam.conf
cat << EOF >> /usr/local/etc/freshclam.conf
DatabaseOwner clamav
DatabaseDirectory /var/lib/clamav
ScriptedUpdates yes
Checks 24
#PrivateMirror 127.0.0.1
UpdateLogFile /usr/local/clamav/logs/freshclam.log
EOF

8、创建病毒库文件夹
#上传病毒库文件到/var/lib/clamav
mkdir /var/lib/clamav
chown -R clamav:clamav /var/lib/clamav
9、执行扫描
cd …/bin
./freshclam #(升级病毒库，离线不能升级病毒库，需要后期手动下载病毒库)
./clamscan --no-summary -ri /tmp #该命令只显示找到的病毒信息
-r 递归扫描子目录
-i 只显示发现的病毒文件
–no-summary 不显示统计信息