Antivir Instsall

Her er hele processen:


Starting AntiVir for UNIX Workstation 2.1.3 installation...

1) installing command line scanner
creating install directory /usr/lib/AntiVir ... done
checking for existing /etc/antivir.conf ... not found
copying bin/antivir to /usr/lib/AntiVir ... done
copying vdf/antivir.vdf to /usr/lib/AntiVir ... done
copying conf/antivir.conf to /etc ... done
copying sh/configantivir to /usr/lib/AntiVir ... done
linking /usr/bin/antivir to /usr/lib/AntiVir/antivir ... done
installation of command line scanner complete


2) installing automatic internet updater
An automatic internet updater is available with version 2.1.3 of
AntiVir for UNIX. This is a daemon that will run in the background
and automatically check for updates (internet access is required).
You may also manually check for updates using:

    antivir --update

You do not need to install the automatic internet updater in order
to manually check for updates. Please read the README file for more
information on updates and how they can best suit you.

Would you like to install the automatic internet updater? [n] y
copying sh/avupdater to /usr/lib/AntiVir ... done

Would you like to create a link in /usr/sbin for avupdater ? [y] y
linking /usr/sbin/avupdater to /usr/lib/AntiVir/avupdater ... done

Would you like the internet updater to start automatically? [y] y
setting up startup script ... done
installation of automatic internet updater complete


3) installing AvGuard
Version 2.1.3 of AntiVir for UNIX is capable of on-access,
real-time scanning of files. This provides the ultimate protection
against viruses and other unwanted software. The on-access scanner
(called AvGuard) is based on Dazuko, a free software project providing
access control. In order to use AvGuard you will need to compile Dazuko
for your kernel. Please refer to src/HOWTO-Dazuko for information on how
to do this. There are several ways in which you can install AvGuard.

        module    - Dazuko will be loaded by the avguard script

        kernel    - Dazuko is always loaded
                    (and should not be loaded by the avguard script)

        no install - do not install AvGuard at this time

Note: Dazuko currently only works with GNU/Linux, FreeBSD and Solaris 9
      systems. If you are interested in helping us port Dazuko to
      OpenBSD, feel free to check out the Dazuko Project at:
      http://www.dazuko.org

available options: m k n

How should AvGuard be installed? [n]

Jeg har ikke prøvet at installere AvGuard, men jeg ville svare m som module. Det betyder at en del af programmet bliver lagt som et module der kan indlæses i kernen. (Fjernes igen).

Fordelen ved dette er at du ikke behøver at compile kernen, kun modulet. (Regner med at installationen selv gør dette for dig). Begge muligheder plejer at betyde at du skal have source koden til kernen til at ligge i /usr/src . Dette for du ved at skrive 'urpmi kernel-source-2.6' i en terminal som root.

Dropper AvGuard, det går fint med ./configure men ved "make" sker der ingenting.

Tror heller ikke der er så meget at være nervøs for, kører jo chkrootkit hver dag og er bag router samtidig med at den Shorewall Firewall.

Jeg overvejer at installere et antivirus produkt på linux serveren.

Jeg regner med både at kunne spare tid og penge ved at have AV på serveren istedet for klienterne. Hvis serveren både kontrollere e-mails og alt hvad brugerne gemmer på deres share, så håber jeg at begrænse smitten så meget at jeg kan ghoste alle smitede computere, uden at de bliver smittet igen idenfor 5 min. (eller indtil de starter OutLook så den henter den samme mail igen).

Bare virussen ikke afvikles som root kan den jo ikke skade systemet men kun brugerens konto og så er det jo bare at oprette en ny bruger.
Men til mailserver vil det nok være en god ide´.