16 Mar 2017

clamav

Whitelist

./eicar.com: Win.Test.EICAR_HSB-1 FOUND

echo "Win.Test.EICAR_HSB-1" >> /var/lib/clamav/whitelist.ign2

Un script de scan :

#!/usr/bin/env bash

# Scan and report for clamav
# by Jerem
# 20170313

TODAY=$(date +%Y.%m.%d)
LOGFILE=/var/log/clamav/clamav_scan.$TODAY.log
HOSTNAME=$(hostname)
#       --exclude=REGEX, --exclude-dir=REGEX

if [ -f $LOGFILE ]
        then rm -f $LOGFILE
fi

date > $LOGFILE
 
/usr/bin/clamscan -rio /data -l $LOGFILE

date >> $LOGFILE

if ((`/bin/grep Infected $LOGFILE | cut -d : -f2` > 0 ))
        then cat $LOGFILE | mail -s "Antivirus scan on $HOSTNAME" -a "From:supervision@plop.com" jerem@mail.fr
fi