{"id":2511,"date":"2013-06-20T14:37:48","date_gmt":"2013-06-20T05:37:48","guid":{"rendered":"http:\/\/auctionpro.co.kr\/?p=2511"},"modified":"2015-04-16T10:43:47","modified_gmt":"2015-04-16T01:43:47","slug":"%eb%a6%ac%eb%88%85%ec%8a%a4%ec%9a%a9-%eb%b0%94%ec%9d%b4%eb%9f%ac%ec%8a%a4-%eb%b0%b1%ec%8b%a0-clamav","status":"publish","type":"post","link":"https:\/\/www.auctionpro.co.kr\/?p=2511","title":{"rendered":"[ubuntu] \ub9ac\ub205\uc2a4\uc6a9 \ubc14\uc774\ub7ec\uc2a4 \ubc31\uc2e0 – ClamAV"},"content":{"rendered":"

\"ClamAV\"<\/a>
\napt-get install clamav<\/p>\n

ClamAV(Clam AntiVirus)\ub294 \uacf5\uac1c\uc6a9 \ubc31\uc2e0\uc73c\ub85c \uc708\ub3c4\uc6b0\uc988, \ub9ac\ub205\uc2a4, OS X \uc6a9 \ubc84\uc83c\ub4e4\uc774 \uc788\ub2e4.
\n\uc2e4\uc2dc\uac04 \ud0d0\uc9c0\uac00 \ub418\uc9c0 \uc54a\ub294 \ubc31\uc2e0\uc774\ubbc0\ub85c \uc2dc\uc2a4\ud15c\uc744 \uc8fc\uae30\uc801\uc73c\ub85c \uc2a4\uce90\ub2dd\ud558\uc5ec \ubc14\uc774\ub7ec\uc2a4\ub97c \ud0d0\uc9c0\ud574\uc57c\ub9cc \ud55c\ub2e4.<\/p>\n

\ub9ac\ub205\uc2a4 \uc2dc\uc2a4\ud15c \uc6b4\uc601\uc2dc \ud06c\uac8c 3\uac00\uc9c0 \uc774\uc720\ub85c \ubc31\uc2e0\uc774 \ud544\uc694 \ud560 \uc218 \uc788\ub2e4.
\n1) \uc6f9\uc11c\ubc84\ub97c \uc6b4\uc601\ud558\ub294 \uacbd\uc6b0 \uc6f9\uc258 \uad00\ub828 \uc2a4\ud06c\ub9bd\ud2b8(php, jsp)\ub098 \uc545\uc131\ucf54\ub4dc \ub4f1\uc744 \ud0d0\uc9c0
\n2) \uc708\ub3c4\uc6b0\uc988 \uc2dc\uc2a4\ud15c\uc744 \uc704\ud55c \ud30c\uc77c\uc11c\ubc84(SMB, FTP, \uc6f9\uc5c5\ub85c\ub4dc)\ub97c \uc6b4\uc601\ud560 \uacbd\uc6b0 \uc708\ub3c4\uc6b0\uc988 OS\uc5d0 \uc601\ud5a5\uc744 \ubbf8\uce58\ub294 \ubc14\uc774\ub7ec\uc2a4 \ub4f1\uc744 \ud0d0\uc9c0
\n3) \uba54\uc77c\uc11c\ubc84 \uc6b4\uc601\uc2dc \uba54\uc77c(\ucca8\ubd80\ud30c\uc77c\ub4f1)\uc758 \uc545\uc131\ucf54\ub4dc \ub4f1\uc744 \ud0d0\uc9c0 (\uc5ec\uae30\uc11c\ub294 \ub2e4\ub8e8\uc9c0 \uc54a\uc558\ub2e4.)<\/p>\n

0. \ud14c\uc2a4\ud2b8 \ud658\uacbd
\nOS : CentOS 4.x 32bit
\nClamAV Version : clamav-0.97.7.tar.gz<\/p>\n

1. clamav \uc18c\uc2a4 \ub2e4\uc6b4\ub85c\ub4dc
\nhttp:\/\/sourceforge.net\/projects\/clamav\/files\/clamav
\n\"ClamAntiVirus\"<\/a><\/p>\n

2. \uc720\uc800 \uc0dd\uc131
\ngroupadd -g 555 clamav
\nuseradd -g 555 -M -s \/sbin\/nologin -c “ClamAntiVirus” clamav<\/p>\n

3. \uc555\ucd95\ud480\uae30
\ntar xvfzp clamav-0.98.6.tar.gz
\n3.1 \uc124\uce58 -\uc124\uce58 \uc804 gcc \ucef4\ud30c\uc77c\ub7ec \uc124\uce58(\ud544\uc218\uc0ac\ud56d)
\n.\/configure –enable-static –prefix=\/usr\/local\/clamav –disable-zlib-vcheck ; make ; make install
\n(\ucc38\uace0 : \uba54\uc77c\uc11c\ubc84 \uc6b4\uc601\ud560 \uacbd\uc6b0 \uba54\uc77c \uac10\uc2dc\ub97c \uc704\ud574\uc120 configure\uc2dc –enable-milter \uc635\uc158\uc744 \uc900\ub2e4.)<\/p>\n

4. \ub514\ub809\ud1a0\ub9ac \uc0dd\uc131
\nmkdir \/usr\/local\/clamav\/db
\nmkdir \/usr\/local\/clamav\/log
\nchown clamav.clamav \/usr\/local\/clamav\/db
\nchown clamav.clamav \/usr\/local\/clamav\/log
\nchmod 700 \/usr\/local\/clamav\/db
\nchmod 700 \/usr\/local\/clamav\/log
\nmkdir \/var\/run\/clamav (\uc5c6\uc73c\uba74 \ub9cc\ub4e4\uac83. clamd.socket \ud30c\uc77c\uc774 \uc0dd\uc131\ub41c\ub2e4.)<\/p>\n

5. iconv \ub77c\uc774\ube0c\ub7ec\ub9ac \ub9c1\ud06c
\nln -s \/usr\/local\/lib\/libiconv.so.2 \/usr\/lib
\n–> \uc544\ub798 \uc5d0\ub7ec \ubc29\uc9c0
\nerror while loading shared libraries: libiconv.so.2: cannot open shared object file: No such file or directory<\/p>\n

6. \uc124\uc815
\nvi \/usr\/local\/clamav\/etc\/clamd.conf
\n#Example –> \uc8fc\uc11d\ucc98\ub9ac
\nLocalSocket \/var\/run\/clamav\/clamd.socket
\nFixStaleSocket yes
\nTCPSocket 3310
\nTCPAddr 127.0.0.1
\nMaxThreads 20
\nUser clamav
\nLogFile \/usr\/local\/clamav\/log\/clamd.log
\nLogTime yes
\nPidFile \/usr\/local\/clamav\/log\/clamd.pid
\nDatabaseDirectory \/usr\/local\/clamav\/db
\nDetectBrokenExecutables yes<\/p>\n

vi \/usr\/local\/clamav\/etc\/freshclam.conf
\n#Example –> \uc8fc\uc11d\ucc98\ub9ac
\nDatabaseMirror database.clamav.net
\nDatabaseDirectory \/usr\/local\/clamav\/db\/
\nUpdateLogFile \/usr\/local\/clamav\/log\/freshclam.log
\nDatabaseOwner clamav
\nNotifyClamd \/usr\/local\/clamav\/etc\/clamd.conf<\/p>\n

7. \ubc14\uc774\ub7ec\uc2a4 DB \uc5c5\ub370\uc774\ud2b8 (\ucc98\uc74c \uc2a4\uce94\uc804\uc5d0 \uc2e4\ud589\ud574\uc57c \ud55c\ub2e4. cron\uc5d0 \ub123\uc5b4 \uc8fc\uae30\uc801\uc778 \uc5c5\ub370\uc774\ud2b8)
\n\/usr\/local\/clamav\/bin\/freshclam<\/p>\n

8. \uc2a4\uce94\ud558\uae30
\n1) home \ub514\ub809\ud1a0\ub9ac(\ud558\uc704\ud3ec\ud568)\ub97c \uc2a4\uce94\ud558\uc5ec \uac10\uc5fc\ub41c \ud30c\uc77c \ud654\uba74 \ucd9c\ub825
\n\/usr\/local\/clamav\/bin\/clamscan -riv \/home<\/p>\n

2) home \ub514\ub809\ud1a0\ub9ac(\ud558\uc704\ud3ec\ud568)\ub97c \uc2a4\uce94
\n\/usr\/local\/clamav\/bin\/clamscan -rv \/home<\/p>\n

9. crontab
\n00 23 * * * \/usr\/local\/clamav\/bin\/freshclam –quiet
\n00 00 * * * CurrTime=`date +%Y-%m-%d””_%T` ; \/usr\/local\/clamav\/bin\/clamscan -rv –move=\/home\/infected \/home | awk ‘{now=strftime(“%F %T”); print now, ” “, $0}’ >& \/usr\/local\/clamav\/log\/”$CurrTime”_clamscan.log
\n00 12 * * * find \/home\/infected\/* -mtime +14 -user root -exec rm -f {} \\; ; find \/usr\/local\/clamav\/log\/* -mtime +30 -user root -exec rm -f {} \\;<\/p>\n

–> \uc704 cron\uc744 \ud574\uc11d\ud558\uc790\uba74,
\n1) \ub9e4\uc77c 23\uc2dc\uc5d0 \ubc14\uc774\ub7ec\uc2a4 DB \uc5c5\ub370\uc774\ud2b8
\n2) \ub9e4\uc77c 00\uc2dc\uc5d0 \/home \ub514\ub809\ud1a0\ub9ac\ub97c \uc2a4\uce94\ud558\uc5ec \uac10\uc5fc\ub41c \ud30c\uc77c\uc744 \/home\/infected \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc62e\uae34\ub2e4.
\n\uc2a4\uce90\ub2dd\ud55c \ub9ac\uc2a4\ud2b8\ub294 \/usr\/local\/clamav\/log \ub514\ub809\ud1a0\ub9ac\uc5d0 \ud604\uc7ac\uc2dc\uac01_clamscan.log \ud615\ud0dc\ub85c \ub0a8\uae34\ub2e4. \ub610\ud55c \uc2a4\uce90\ub2dd\ud55c \ub9ac\uc2a4\ud2b8\uc758 \ub514\ub809\ud1a0\ub9ac \uacbd\ub85c \uc55e\uc5d0 \ud604\uc7ac\uc2dc\uac01\uc744 \ub9c8\ud0b9.
\n3) \ub9e4\uc77c 12\uc2dc\uc5d0 \/home\/infected \ub514\ub809\ud1a0\ub9ac \ub0b4\uc758 \uc218\uc815\ub41c\uc9c0 14\uc77c\uc774 \ub118\uc740 root \uc18c\uc720\uad8c \ud30c\uc77c\ub4e4\uc744 \uc0ad\uc81c\ud55c\ub2e4.
\n\uadf8\ub9ac\uace0 \/usr\/local\/clamav\/log \ub514\ub809\ud1a0\ub9ac\ub0b4\uc758 \uc218\uc815\ub41c\uc9c0 30\uc77c\uc774 \ub118\uc740 root \uc18c\uc720\uad8c \ud30c\uc77c\ub4e4\uc744 \uc0ad\uc81c\ud55c\ub2e4.<\/p>\n

* \uac10\uc5fc\ub41c \ud30c\uc77c\uc774 \uc774\ub3d9\ub418\uc5b4 \ubcf4\uad00\ub418\ub294 \/home\/infected \ub514\ub809\ud1a0\ub9ac\ub97c \ub9cc\ub4e4\uc5b4 \uc918\uc57c \ud55c\ub2e4.
\n\uac10\uc5fc\ub41c \ud30c\uc77c\uc744 \uc774\ub3d9 \uc2dc\ucf1c\uc11c \uc77c\uc815\uae30\uac04 \ub0a8\uaca8\ub450\ub294 \uc774\uc720\ub294 \uc624\uc9c4 \ub4f1\uc73c\ub85c \uc778\ud574 \ud30c\uc77c\uc774 \uc6d0\uce58\uc54a\uac8c \uc0ad\uc81c\ub418\ub294\uac83\uc744 \ubc29\uc9c0\ud558\uae30 \uc704\ud574\uc11c\ub2e4.
\n\uadf8\ub9ac\uace0 \uc2a4\uce94\ud55c \ud30c\uc77c \ub9ac\uc2a4\ud2b8(\ub514\ub809\ud1a0\ub9ac\uacbd\ub85c\ub97c\ud3ec\ud568)\ub97c \ubf51\uc544\ub450\ub294 \uc774\uc720\ub294 \uc624\ud0d0\ub41c \ub370\uc774\ud130 \ubcf5\uad6c\uc2dc \uacbd\ub85c\ub97c \uc54c\uc544\uc57c \uc218\uc6d4\ud558\uae30 \ub54c\ubb38\uc774\ub2e4.<\/p>\n

\ucc38\uc870 : http:\/\/www.mapoo.kr\/entry\/clamav-%EB%A6%AC%EB%88%85%EC%8A%A4-%EB%B0%B1%EC%8B%A0?category=33<\/p>\n","protected":false},"excerpt":{"rendered":"

apt-get install clamav ClamAV(Clam AntiVirus)\ub294 \uacf5\uac1c\uc6a9 \ubc31\uc2e0\uc73c\ub85c \uc708\ub3c4\uc6b0\uc988, \ub9ac\ub205\uc2a4, OS X \uc6a9 \ubc84\uc83c\ub4e4\uc774 \uc788\ub2e4. \uc2e4\uc2dc\uac04 \ud0d0\uc9c0\uac00 \ub418\uc9c0 \uc54a\ub294 \ubc31\uc2e0\uc774\ubbc0\ub85c \uc2dc\uc2a4\ud15c\uc744 \uc8fc\uae30\uc801\uc73c\ub85c \uc2a4\uce90\ub2dd\ud558\uc5ec \ubc14\uc774\ub7ec\uc2a4\ub97c \ud0d0\uc9c0\ud574\uc57c\ub9cc \ud55c\ub2e4. […]<\/a><\/p>\n<\/div>","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-2511","post","type-post","status-publish","format-standard","hentry","category-17"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/posts\/2511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2511"}],"version-history":[{"count":0,"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/posts\/2511\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}