IMUNIFYAV

[stephan-ipt]

hi
do you think you can add IMUNIFYAV to keyhelp ?
thnaks
stéphan

[prune]

I agree there is a free version that offers detection only

https://docs.imunifyav.com/stand_alone_mode/

The antivirus log for me shows clamav downloads the signatures successfully but always fails in scanning.

[13-Feb-2023 01:00:01] INFO | start av scanner
[13-Feb-2023 01:00:16] ERROR | av scanner failed: "Abort, anti virus scanner failed."
[13-Feb-2023 01:00:16] INFO | av scanner report:
------------- AV SCAN --------------
Start: 2023-02-13 01:00:01

---------- SCAN LOCATIONS ----------
/home/users
/tmp
/var/tmp

------ UPDATE VIRUS DATABASE -------
Start: 2023-02-13 01:00:01
End: 2023-02-13 01:00:01
Status: Success

--------------- END ----------------
End: 2023-02-13 01:00:16
Status: Abort, anti virus scanner failed.

[Alexander]

Try run the clamscan command and check for possible errors:

Code: Select all

clamscan --infected --recursive --file-list /tmp/keyhelp/anti_virus_scan_paths

[prune]

root@host:~# clamscan --infected --recursive --file-list /tmp/keyhelp/anti_virus_scan_paths
Killed

[Alexander]

You run out of memory?

[Florian]

Hello,

obviously you do not have enough RAM vor the AV scanner

[prune]

You run out of memory?

Pls see attached. I am not. Maybe I have not set swap properly?

[Florian]

You are OK because the AV scanner is not running.

You must check it when it runs.

[Alexander]

You can reduce the amount of additional virus signatures "Configuration" -> "Antivirus Scanner" -> "Additional virus signatures".
Than ClamAV will require less RAM.

[24unix]

You run out of memory?

Pls see attached. I am not. Maybe I have not set swap properly?

Your 32MB ought to be 32GB

[prune]

@alexander
It is set to custom and the box is empty

Is it possible to set the swap to 4 gb in keyhelp admin?

@24unix
The vps has only 2 gb ram

[Florian]

Hallo,

no, you either need a bigger swap parttion or you create a swapfile.

Both cannot be done in Keyhelp.

[24unix]

@24unix
The vps has only 2 gb ram

Then you should use at least 4GB Swap.

But 32MB(!) are useless.

[BasHeijermans]

Also, edit /etc/clamav/clamd.conf and add at the bottom: ConcurrentDatabaseReload no

This will reduce memory consumption during AV database updates a lot and stops overloading the system.

Don't know if Alex made this standard when setting low-memory-AV-checking.

[prune]

Also, edit /etc/clamav/clamd.conf and add at the bottom: ConcurrentDatabaseReload no

This will reduce memory consumption during AV database updates a lot and stops overloading the system.

Don't know if Alex made this standard when setting low-memory-AV-checking.

Thanks I just did add that in clamd.conf

I deleted the 32M swap file and I tried to create a new one with 2048M but I get this error

fallocate: fallocate failed: No space left on device

I am thinking of just disabling the virus scanner since it always fails to run anyway. Is there any cloud alternative available with no signatures locally download and loaded?