Run clamscan

ARUN Posted in HACK，
18 April 2010
0

[root@localhost ~]# clamscan /home/arun/ >> /home/arun/Desktop/infected.txt

[    clamscan -r /var/www/vhosts/selectcarkits.co.uk --infected > infected.txt   ]

Will display the scan result in file infected.txt

clamscan -r -i mail –remove=yes       —> Scan folder named “mail” and remove the infected files.

[ clamscan -r -i /home/UN/mail --move=/home/UN/infected/       ---->  Scan folder named "mail" and move the infected files to /home/UN/infected/  ]

Find FTP details

ARUN Posted in FTP, HACK，
17 April 2010
0

grep ftp /var/log/messages|grep UN|awk ‘{print $6}’|cut -d@ -f2|sort|uniq -c|sort -n

Clam Scan install

ARUN Posted in HACK，
16 April 2010
0

WHM

Main >> cPanel >> Manage Plugins

***********************************************

*** Manuall install ***

cd /usr/local/src
rm -Rf clamav-*

wget http://downloads.sourceforge.net/clamav/clamav-0.96.tar.gz

tar -xzf clamav-*
cd clamav-*
if [ -d "/usr/lib64" ]; then libdir=”–libdir=/usr/lib64″ ; fi ; ./configure –prefix=/usr $libdir –sysconfdir=/etc –disable-ipv6 –disable-zlib-vcheck
make
make install
freshclam
echo “ClamAV update complete!”