clamav viruscan script

1 minute read

Clamav är det virus program som jag för det mesta kör på mina linux servrar.
Den går lätt att installera coh sedan har jag ett litet bash script som scannar mina server en gång per dag /vecka.

För att scriptet ska funka så måste du skapa katalogen

/var/log/clamav


#!/bin/bash

# email subject
SUBJECT="VIRUS DETECTED ON `hostname`!!!"
# Email To ?
EMAIL="sysoparenden@fareoffice.com"
#Date  for saving all scans
DATE=`date +%y-%m-%d`
# Log location
LOG=/var/log/clamav/scan-$DATE.log
echo $DATE

check_scan () {

        # Check the last set of results. If there are any "Infected" counts that aren't zero, we have a problem.
        if [ `tail -n 12 ${LOG}  | grep Infected | grep -v 0 | wc -l` != 0 ]
        then
                EMAILMESSAGE=`mktemp /tmp/virus-alert.XXXXX`
                echo "To: ${EMAIL}" >>  ${EMAILMESSAGE}
                echo "From: noreplay@fareoffice.com" >>  ${EMAILMESSAGE}
                echo "Subject: ${SUBJECT}" >>  ${EMAILMESSAGE}
                echo "Importance: High" >> ${EMAILMESSAGE}
                echo "X-Priority: 1" >> ${EMAILMESSAGE}
                echo "`tail -n 50 ${LOG}`" >> ${EMAILMESSAGE}
                /usr/sbin/sendmail -t < ${EMAILMESSAGE}
        fi

}
/usr/local/bin/freshclam
/usr/local/bin/clamscan -ir --exclude=/proc --exclude=/sys --exclude=/dev --exclude=/media --exclude=/mnt / --quiet --infected --log=${LOG}

check_scan
cat ${LOG} | logger

The post is brought to you by lekhonee v0.7