I have noticed in /var/log/clamav/clamav.log Sun Aug 7 01:14:28 2016 -> ERROR: ScanOnAccess: fanotify_init failed: Operation not permittedSun Aug 7 01:14:28 2016 -> ScanOnAccess: clamd must be started by root
in /etc/clamav/clamd.conf I had User clamav then I changed to User rootand rebooted but this did not helpnot sure if even User should be set to root. I thought clamav is better choice thank you very much for your help ZF On Sunday, August 7, 2016 1:06 AM, Z F <mail4me9...@yahoo.com> wrote: Dear clamav I have used these instructions to setup on-access scan ClamAV® blog: Configuring On-Access Scanning in ClamAV canOnAccess trueOnAccessIncludePath /home/user/DownloadsOnAccessPrevention true OnAccessExtraScanning true the installed version is 0.99+dfsg-1ubuntu1.1 on ubutnu 16.04grep FANOTIFY /boot/config-4.4.0-31-generic CONFIG_FANOTIFY=yCONFIG_FANOTIFY_ACCESS_PERMISSIONS=y I have made a test virus file http://www.eicar.org/86-0-Intended-use.html but the test file can be still accessed. could someone suggest what I did wrong?thank you ZF | | | ClamAV® blog: Configuring On-Access Scanning in ClamAV | | | _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml