Sponsored Content
Full Discussion: Antivirus software for UNIX
Special Forums Cybersecurity Antivirus software for UNIX Post 15682 by Perderabo on Monday 18th of February 2002 03:01:50 PM
Old 02-18-2002
Symantec seems to have a product:

Quote:
Symantec AntiVirus Command Line Scanner™ 1.0 provides advanced, high-performance virus scanning and repair services for Linux, Solaris and Windows based clients and servers. Symantec AntiVirus Command Line Scanner utilizes Symantec's CarrierScan Server™, which is based on Symantec's award-winning anti-virus technologies to detect malicious viruses, worms, and Trojan horses in all major file types, including mobile code and compressed file formats.
You've gotta be careful of the terminology. Very strictly speaking a virus is a piece of machine language code that is added into the free space at the end of the last page of an executable. It must be very tiny since free space is tight. Unix users rarely if ever download executables and there are many different machine languages, each with multiple executable formats. This makes unix based viruses very unprofitable.

But put some machine language in a gif file and you have a different situation. Unix users will download a gif file. Strictly speaking this is a trojan horse. But loosely, some folks will call this a virus. Or they talk about a gif file having a "viral content".

So a virus scanner on unix can make some sense provided that it doesn't take a real strict view of what constitutes a virus.
 

9 More Discussions You Might Find Interesting

1. IP Networking

Software Router for Unix

Dear Users: I'm trying to find a software based Unix Router. I only want to bridge two subnets, and I'm not trying to share an internet connection. Ultimately, I'm looking for the sourcecode so that I can compile it for Mac OS X, which is the machine that the we want the router to run on. I'd... (4 Replies)
Discussion started by: emulator
4 Replies

2. Cybersecurity

Who uses Antivirus software on your linux servers?

So who uses antivirus software on your linux servers? A co-worker and myself have been debating on the need or lack there of for antivirus on a linux webserver running Apache even if that's the only service that may be running. He thinks no and I am of the opinion that it is needed. My rational... (1 Reply)
Discussion started by: jjvaas
1 Replies

3. HP-UX

Hp Unix software

Hi, where can i get Hp unix dummy version to use in my home system.iam a newbie to unix.pls let me know if any avilable..Thank you Shruti (6 Replies)
Discussion started by: shruti_mgp
6 Replies

4. What is on Your Mind?

UNIX voting software

Was wondering if anyone would entertain the idea of creating open source voting software--seems like as this issue moves forward we have an opportunity and the ability to build a powerful worldwide tool to secure voting rights for everyone (2 Replies)
Discussion started by: samuraiblade
2 Replies

5. UNIX for Dummies Questions & Answers

where can i get software for install unix

Need help guys, i need to know where can i get a unix on solaris 10 software to install unix into my computer since i dont have internet. I want to start playing on them at home. Any help appreciated .... sonny (1 Reply)
Discussion started by: rxsonny
1 Replies

6. UNIX for Advanced & Expert Users

unix software problem

helllo! I work in Department of Civil Aviation.Our SSR Radar use AlphaServer 800 with unix os.Now, sever can't startup completely.Its error messages are... Enviromental Monitoring System can't start. kdaemon progam not running. network name and login name don't match. I can enter login and... (5 Replies)
Discussion started by: akzin
5 Replies

7. UNIX for Dummies Questions & Answers

how to practice unix in online without unix software

hi, im new to unix.i dont have unix software in my system. Is there any website is there to practice unix in online can u please any one help me...... thanks in advance (3 Replies)
Discussion started by: gowridoc
3 Replies

8. UNIX for Dummies Questions & Answers

UNIX Software

Hi All, From where can i get the UNIX Software so that i can install the same in my Laptop. Thanks Dilip (2 Replies)
Discussion started by: DilipPanda
2 Replies

9. UNIX for Dummies Questions & Answers

Help with Unix Software on Windows

Hi, I am new to this forum. Can anyone help me to find a unix editor/software which will work in windows. Thanks (6 Replies)
Discussion started by: sundaresanv
6 Replies
clamscan(1)							  Clam AntiVirus						       clamscan(1)

NAME
clamscan - scan files and directories for viruses SYNOPSIS
clamscan [options] [file/directory/-] DESCRIPTION
clamscan is a command line anti-virus scanner. OPTIONS
Most of the options are simple switches which enable or disable some features. Options marked with [=yes/no(*)] can be optionally followed by =yes/=no; if they get called without the boolean argument the scanner will assume 'yes'. The asterisk marks the default internal setting for a given option. -h, --help Print help information and exit. -V, --version Print version number and exit. -v, --verbose Be verbose. --debug Display debug messages from libclamav. --quiet Be quiet (only print error messages). --stdout Write all messages (except for libclamav output) to the standard output (stdout). -d FILE/DIR, --database=FILE/DIR Load virus database from FILE or load all virus database files from DIR. --official-db-only=[yes/no(*)] Only load the official signatures published by the ClamAV project. -l FILE, --log=FILE Save scan report to FILE. --tempdir=DIRECTORY Create temporary files in DIRECTORY. Directory must be writable for the '' user or unprivileged user running clamscan. --leave-temps Do not remove temporary files. -f FILE, --file-list=FILE Scan files listed line by line in FILE. -r, --recursive Scan directories recursively. All the subdirectories in the given directory will be scanned. --cross-fs=[yes(*)/no] Scan files and directories on other filesystems. --bell Sound bell on virus detection. --no-summary Do not display summary at the end of scanning. --exclude=REGEX, --exclude-dir=REGEX Don't scan file/directory names matching regular expression. These options can be used multiple times. --include=REGEX, --include-dir=REGEX Only scan file/directory matching regular expression. These options can be used multiple times. -i, --infected Only print infected files. --remove[=yes/no(*)] Remove infected files. Be careful. --move=DIRECTORY Move infected files into DIRECTORY. Directory must be writable for the '' user or unprivileged user running clamscan. --copy=DIRECTORY Copy infected files into DIRECTORY. Directory must be writable for the '' user or unprivileged user running clamscan. --bytecode[=yes(*)/no] With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option turned on, oth- erwise you may miss detections for many new viruses. --bytecode-trust-all[=yes/no(*)] This option disables safety checks and makes ClamAV trust all bytecode. It should only be used for debugging. --bytecode-timeout=N Set bytecode timeout in milliseconds (default: 60000 = 60s) --detect-pua[=yes/no(*)] Detect Possibly Unwanted Applications. --exclude-pua=CATEGORY Exclude a specific PUA category. This option can be used multiple times. See http://www.clamav.net/support/pua for the complete list of PUA --include-pua=CATEGORY Only include a specific PUA category. This option can be used multiple times. See http://www.clamav.net/support/pua for the complete list of PUA --detect-structured[=yes/no(*)] Use the DLP (Data Loss Prevention) module to detect SSN and Credit Card numbers inside documents/text files. --structured-ssn-format=X X=0: search for valid SSNs formatted as xxx-yy-zzzz (normal); X=1: search for valid SSNs formatted as xxxyyzzzz (stripped); X=2: search for both formats. Default is 0. --structured-ssn-count=#n This option sets the lowest number of Social Security Numbers found in a file to generate a detect (default: 3). --structured-cc-count=#n This option sets the lowest number of Credit Card numbers found in a file to generate a detect (default: 3). --scan-mail[=yes(*)/no] Scan mail files. --phishing-sigs[=yes(*)/no] Use the signature-based phishing detection. --phishing-scan-urls[=yes(*)/no] Use the url-based heuristic phishing detection (Phishing.Heuristics.Email.*) --heuristic-scan-precedence[=yes/no(*)] Allow heuristic match to take precedence. When enabled, if a heuristic scan (such as phishingScan) detects a possible virus/phish it will stop scan immediately. Recommended, saves CPU scan-time. When disabled, virus/phish detected by heuristic scans will be reported only at the end of a scan. If an archive contains both a heuristically detected virus/phish, and a real malware, the real malware will be reported Keep this disabled if you intend to handle "*.Heuristics.*" viruses differently from "real" malware. If a non-heuristically-detected virus (signature-based) is found first, the scan is interrupted immediately, regardless of this config option. --phishing-ssl[=yes/no(*)] Block SSL mismatches in URLs (might lead to false positives!). --phishing-cloak[=yes/no(*)] Block cloaked URLs (might lead to some false positives). --algorithmic-detection[=yes(*)/no] In some cases (eg. complex malware, exploits in graphic files, and others), ClamAV uses special algorithms to provide accurate detection. This option can be used to control the algorithmic detection. --scan-pe[=yes(*)/no] PE stands for Portable Executable - it's an executable file format used in all 32-bit versions of Windows operating systems. By default ClamAV performs deeper analysis of executable files and attempts to decompress popular executable packers such as UPX, Petite, and FSG. --scan-elf[=yes(*)/no] Executable and Linking Format is a standard format for UN*X executables. This option controls the ELF support. --scan-ole2[=yes(*)/no] Scan Microsoft Office documents and .msi files. --scan-pdf[=yes(*)/no] Scan within PDF files. --scan-html[=yes(*)/no] Detect, normalize/decrypt and scan HTML files and embedded scripts. --scan-archive[=yes(*)/no] Scan archives supported by libclamav. --detect-broken[=yes/no(*)] Mark broken executables as viruses (Broken.Executable). --block-encrypted[=yes/no(*)] Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). --max-files=#n Extract at most #n files from each scanned file (when this is an archive, a document or another kind of container). This option pro- tects your system against DoS attacks (default: 10000) --max-filesize=#n Extract and scan at most #n kilobytes from each archive. You may pass the value in megabytes in format xM or xm, where x is a num- ber. This option protects your system against DoS attacks (default: 25 MB, max: <4 GB) --max-scansize=#n Extract and scan at most #n kilobytes from each scanned file. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: <4 GB) --max-recursion=#n Set archive recursion level limit. This option protects your system against DoS attacks (default: 16). --max-dir-recursion=#n Maximum depth directories are scanned at (default: 15). EXAMPLES
(0) Scan a single file: clamscan file (1) Scan a current working directory: clamscan (2) Scan all files (and subdirectories) in /home: clamscan -r /home (3) Load database from a file: clamscan -d /tmp/newclamdb -r /tmp (4) Scan a data stream: cat testfile | clamscan - (5) Scan a mail spool directory: clamscan -r /var/spool/mail RETURN CODES
0 : No virus found. 1 : Virus(es) found. 2 : Some error(s) occured. CREDITS
Please check the full documentation for credits. AUTHOR
Tomasz Kojm <tkojm@clamav.net> SEE ALSO
clamdscan(1), freshclam(1), freshclam.conf(5) ClamAV 0.96.1 December 30, 2008 clamscan(1)
All times are GMT -4. The time now is 03:45 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy