Hello,

In the Message; 

  Subject    : [clamav-users] Seeking newbie level help with setting up and 
using ClamAV
  Message-ID : <ab80e9ce-8ff8-4c1a-90fd-8fd1701a7...@orcon.net.nz>
  Date & Time: Sun, 21 Jul 2024 16:08:30 +1200

[SA] == "Ayre, Sarah via clamav-users" <clamav-users@lists.clamav.net> has 
written:

[...]
SA>  Then, to *achieve number 1* in my list of uses of ClamAV above, I
SA> propose to run the command:

SA>  $ sudo clamscan --recursive --infected /home/sarah

SA>  to scan and detect infections in the whole of the Home Directory
SA>  including all its subdirectories on my main internal drive. My
SA>  extra internal drive named SecondaryDrive is mounted in the Home
SA>  Directory even though it is a physically separate drive. I am
SA>  imagining that if I wished to only scan the extra drive I would
SA>  run

SA>  $ sudo clamscan --recursive --infected /home/sarah/SecondaryDrive

SA>  but that otherwise it would be scanned as part of scanning the
SA>  whole of the Home Directory (is this correct? I am the only
SA>  person using the computer).

This is because SecondDrive is not mounted.

That is;

  1. $ sudo mount /SeconfDrive /home/sarah

then, execute

      $ sudo clamscan --recursive --infected /home/sarah/SecondaryDrive

If I want to quarantine virus-infected files to /home/sarah/virus;

   $ sudo clamscan --recursive --infected --move=/home/sarah/virus 
/home/sarah/SecondaryDriv

But, there's a way to do this without mounting it as root.

That is, if you connect the SecondDrive to PC, it will appear like
this by some operation;

     /run/media/sarah/....... /SecondDrive

in this case, you can use the below command as an ordinary user;

   $ clamscan -r --infected /run/media/sarah/...../SecondDrive

Furthermore, if you move a virus-infected file(s) to ~/virus (=/home/sarah/vius)

 $ clamscan -r --infected --move=~/virus /run/media/sarah/...../SecondDrive

2. Regarding virus check of mails

I check for viruses when I fetch mails from the server, but your
Thunderbd fetches mail directly from the server, doesn't it?

I don't know how to do it in this case, so I'll leave it to others to
advise.

Best Regards.

---
┏━━┓彡  Masaru Nomiya                       mail-to: nomiya @ lake.dti.ne.jp
┃\/彡
┗━━┛    "Microsoft is overhauling its cybersecurity strategy, called the
                Secure Future Initiative, to incorporate key security features
                into its core set of technology platforms and cloud services. "
          
-- Microsoft overhauls cyber strategy to finally embrace security by default --
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to