KeyHelp Community

hi
do you think you can add IMUNIFYAV to keyhelp ?
thnaks
stéphan

I agree there is a free version that offers detection only

https://docs.imunifyav.com/stand_alone_mode/

The antivirus log for me shows clamav downloads the signatures successfully but always fails in scanning.

[13-Feb-2023 01:00:01] INFO | start av scanner
[13-Feb-2023 01:00:16] ERROR | av scanner failed: "Abort, anti virus scanner failed."
[13-Feb-2023 01:00:16] INFO | av scanner report:
------------- AV SCAN --------------
Start: 2023-02-13 01:00:01

---------- SCAN LOCATIONS ----------
/home/users
/tmp
/var/tmp

------ UPDATE VIRUS DATABASE -------
Start: 2023-02-13 01:00:01
End: 2023-02-13 01:00:01
Status: Success

--------------- END ----------------
End: 2023-02-13 01:00:16
Status: Abort, anti virus scanner failed.

Try run the clamscan command and check for possible errors:

root@host:~# clamscan --infected --recursive --file-list /tmp/keyhelp/anti_virus_scan_paths
Killed

You run out of memory?

Hello,

obviously you do not have enough RAM vor the AV scanner

Alexander wrote: ↑Wed 15. Feb 2023, 11:40 You run out of memory?

Pls see attached. I am not. Maybe I have not set swap properly?

You are OK because the AV scanner is not running.

You must check it when it runs.

You can reduce the amount of additional virus signatures "Configuration" -> "Antivirus Scanner" -> "Additional virus signatures".
Than ClamAV will require less RAM.

prune wrote: ↑Wed 15. Feb 2023, 11:49

Alexander wrote: ↑Wed 15. Feb 2023, 11:40 You run out of memory?

Pls see attached. I am not. Maybe I have not set swap properly?

Your 32MB ought to be 32GB

@alexander
It is set to custom and the box is empty

Is it possible to set the swap to 4 gb in keyhelp admin?

@24unix
The vps has only 2 gb ram

Hallo,

no, you either need a bigger swap parttion or you create a swapfile.

Both cannot be done in Keyhelp.

prune wrote: ↑Wed 15. Feb 2023, 12:13 @24unix
The vps has only 2 gb ram

Then you should use at least 4GB Swap.

But 32MB(!) are useless.

Also, edit /etc/clamav/clamd.conf and add at the bottom: ConcurrentDatabaseReload no

This will reduce memory consumption during AV database updates a lot and stops overloading the system.

Don't know if Alex made this standard when setting low-memory-AV-checking.

BasHeijermans wrote: ↑Wed 15. Feb 2023, 17:23 Also, edit /etc/clamav/clamd.conf and add at the bottom: ConcurrentDatabaseReload no

This will reduce memory consumption during AV database updates a lot and stops overloading the system.

Don't know if Alex made this standard when setting low-memory-AV-checking.

Thanks I just did add that in clamd.conf

I deleted the 32M swap file and I tried to create a new one with 2048M but I get this error

fallocate: fallocate failed: No space left on device

I am thinking of just disabling the virus scanner since it always fails to run anyway. Is there any cloud alternative available with no signatures locally download and loaded?