ClamAV 0.97 has been released

[interfasys]

ClamAV 0.97 brings many improvements, including complete Windows support
(all major components compile out-of-box under Visual Studio), support for
signatures based on SHA1 and SHA256, better error detection, as well as
speed and memory optimizations. The complete list of changes is available
in the ChangeLog file. For upgrade notes and tips please see:
https://wiki.clamav.net/Main/UpgradeNotes097

Download : http://downloads.sourceforge.net/clamav/clamav-0.97.tar.gz
PGP sig : http://downloads.sourceforge.net/clamav/clamav-0.97.tar.gz.sig
Bugfixes : http://www.clamav.net/release-info/bugs/0.97
ChangeLog: http://www.clamav.net/release-info/changelog/0.97

[asishlla]

Hi,
can you please write the upgrade commands for people like me this is the first time do it myself?
if i upgrade will happen any problem?
thank you

[interfasys]

Hello,
On FreeBSD:

# portmaster clamav

On Linux, check this guide:
http://directadmin.com/forum/showthread.php?t=10478

[interfasys]

And mods can delete this thread if they want to since there is another one in 3rd party software. ClamAV is only recommended, not required.

[asishlla]

Hi,thank you (Linux)
after look for that thraed the commands is:


wget http://www.web4host.net/tools/ClamAV-update-tools.sh
chmod 755 ClamAV-update-tools.sh
./ClamAV-update-tools.sh

Is this true? :)
Do i need to do any thing before or after?
thank you.

[interfasys]

That script doesn't exist any more, but you could try a beta version of custombuild:
http://files.directadmin.com/services/custombuild/beta/build-1.2

Best to ask in the CB forum though...

[asishlla]

you make my life very hard!!! please just give me a way to upgrade it man!!
look here please:
http://www.amit.org.il/chibur/images/cry.gif

[nobaloney]

If you can't figure out any other way to do it, just install it as new.

Jeff

[asishlla]

Hi,
if i type for update database


freshclam

and for update:


freshclam -d

is this true?

[asishlla]

Hi,
After my success in learning something important with the assistance of greate people in this great forum..I hope that I would see the same support in this topic.
I want to delete my version of clamav and install it again fresh!
On this subject (http://www.directadmin.com/forum/showthread.php?p=196902#post196902)i have received commands for ssh and not links to external sites and this thing make the task easier..

[nobaloney]

I can't tell you exactly how to delete it because I don't know where you installed it.

But this guide should help you.

Find your source directory:

# locate clamav-
Then cd into the directory where it's built, and run:

# make uninstall
Then install it as you did the first time, probably with [i]make install and then make sure none of your /etc/clamd.conf settings have changed (they shouldn't have).

Note that this will not restart clam already running in memory.

To do that you need to stop the program:

# killall -9 clamd
and then restart it:

# whereis clamd
And then enter the full path as shown... for example (but not necessarily the same as on your server):

/usr/local/sbin/clamd
Jeff

[asishlla]

Thank you jlasman ,now for who want to install it:
to know your Platform run:

uname -i
i386 mean 32bit
x86_64 mean 64bit
for 32bit run:

wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm
for 64bit run:

rpm -Uvh http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm
now for 32bit and 64bit run:

yum install rpm-build -y
install ClamAV :

yum -y --enablerepo=rpmforge install clamd
thats it! now to start Program with update:

/etc/rc.d/init.d/clamd start
chkconfig clamd on
chkconfig --list clamd
sed -i 's/Example/#Example/g' /etc/freshclam.conf
freshclam
for scan files and remove virus:

clamscan --infected --remove --recursive /home
for scan one site in home:

clamscan --infected --remove --recursive /home/modelayer
for update the Program any time run:

freshclam
remove Program by run:

yum remove clamav
thank you for help!

[nobaloney]

I've always built it from scratch. Do you find that the rpm is always up-to-date?

What do you need to put into your exim.conf file to make sure it looks for clamav on the right socket?

Will freshclam keep it updated without ever again having to run yum update?

Jeff

[asishlla]

Hi Jeff,
actually I did not do anything with exim.conf ,but But the program looks for viruses and delete it immediately and efficiently this is what was tested yesterday!
yes when i run "freshclam" I get a message that the program that works within the latest version.

[nobaloney]

Did you ever set up exim.conf to work with SpamAssassin? If you did, then it must check on the right socket. If it does, and you didn't change it, then either coincidentally the RPM installs the socket you've got set up in exim.conf, or you may be running two versions in two different locations.

Jeff

[asishlla]

Hi jeff,
i did not ever set up exim.conf to work with SpamAssassin! i will be happy if you guide me how to do that,

[SeLLeRoNe]

if you look for update.script in this forum there is an how to install and implement with exim and proftpd.

exim SB4 from jal already have the line for clam (default are commented) so you will just need to uncomment those lines (ofc if you use SpamBlocker v4)

Regards

[asishlla]

Hi SeLLeRoNe,
Do you mean this:
http://www.directadmin.com/forum/showthread.php?t=22587&highlight=update.script

[SeLLeRoNe]

exactly.

I use to use that for update clam and other little nice stuffs ;)

Regards

[asishlla]

sorrey,that what should i do?

ClamAV


nano -w /etc/exim.conf

before


primary_hostname =

add


av_scanner = clamd:127.0.0.1 3310

after


check_message:

add


deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (.$found_extension)
demime = bat:com:pif:prf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

save then restart exim


/sbin/service exim restart

*****
*****
*****

ProFTP with mod_clamav
Edit


nano /etc/proftpd.conf

add this before </Global>


<IfModule mod_clamav.c>
ClamAV on
ClamServer 127.0.0.1
ClamPort 3310
</IfModule>

save and restart proftp


/sbin/service proftpd restart

*****
*****
*****

[SeLLeRoNe]

after install clamav with ./update.script CLAMAV yes that are the steps to follow :)

[asishlla]

SeLLeRoNe thank you very much man!!