1、安装epel仓库源
╰─➤ sudo yum -y install epel-releaseLoaded plugins: axelget, fastestmirror, langpacks, product-id, search-disabled- : repos, subscription-managerThis system is not registered with an entitlement server. You can use subscription-manager to register.repomd.xml | 3.0 kB 00:00:00 elrepo/primary_db | 457 kB 00:00:01 update elrepo metadata successfullyepel/x86_64/metalink | 5.3 kB 00:00:00 repomd.xml | 4.7 kB 00:00:00 epel/group | 397 kB 00:00:01 epel/updateinfo | 1.0 MB 00:00:01 epel/primary | 3.9 MB 00:00:01 epel/primary_db | 7.0 MB 00:00:01 update epel metadata successfullyNo metadata available for extrasrepomd.xml | 2.6 kB 00:00:00 update mysql-connectors-community metadata successfullyrepomd.xml | 2.6 kB 00:00:00 update mysql-tools-community metadata successfullyrepomd.xml | 2.6 kB 00:00:00 mysql56-community/primary_db | 297 kB 00:10:02 update mysql56-community metadata successfullyNo metadata available for osNo metadata available for updatesLoading mirror speeds from cached hostfile * elrepo: ftp.yz.yamagata-u.ac.jp * epel: mirrors.bfsu.edu.cnepel/x86_64/group_gz | 99 kB 00:00:00 Package epel-release-7-14.noarch already installed and latest versionNothing to do2、yum下载clamav
╰─➤ sudo yum install –y clamav clamavd clamav-updateLoaded plugins: axelget, fastestmirror, langpacks, product-id, search-disabled-repos, subscription-managerThis system is not registered with an entitlement server. You can use subscription-manager to register.No metadata available for elrepoNo metadata available for epelNo metadata available for extrasNo metadata available for mysql-connectors-communityNo metadata available for mysql-tools-communityNo metadata available for mysql56-communityNo metadata available for osNo metadata available for updatesLoading mirror speeds from cached hostfile * elrepo: ftp.yz.yamagata-u.ac.jp * epel: mirrors.bfsu.edu.cnNo package clamavd available.Resolving Dependencies--> Running transaction check---> Package clamav.x86_64 0:0.103.8-3.el7 will be installed--> Processing Dependency: clamav-filesystem = 0.103.8-3.el7 for package: clamav-0.103.8-3.el7.x86_64--> Processing Dependency: clamav-lib = 0.103.8-3.el7 for package: clamav-0.103.8-3.el7.x86_64--> Processing Dependency: libclamav.so.9(CLAMAV_PRIVATE)(64bit) for package: clamav-0.103.8-3.el7.x86_64--> Processing Dependency: libclamav.so.9(CLAMAV_PUBLIC)(64bit) for package: clamav-0.103.8-3.el7.x86_64--> Processing Dependency: libclamav.so.9()(64bit) for package: clamav-0.103.8-3.el7.x86_64---> Package clamav-update.x86_64 0:0.103.8-3.el7 will be installed--> Processing Dependency: libprelude.so.28()(64bit) for package: clamav-update-0.103.8-3.el7.x86_64--> Running transaction check---> Package clamav-filesystem.noarch 0:0.103.8-3.el7 will be installed---> Package clamav-lib.x86_64 0:0.103.8-3.el7 will be installed---> Package libprelude.x86_64 0:5.2.0-2.el7 will be installed--> Finished Dependency ResolutionDependencies Resolved======================================================================================================================================= Package Arch Version Repository Size=======================================================================================================================================Installing: clamav x86_64 0.103.8-3.el7 epel 332 k clamav-update x86_64 0.103.8-3.el7 epel 128 kInstalling for dependencies: clamav-filesystem noarch 0.103.8-3.el7 epel 44 k clamav-lib x86_64 0.103.8-3.el7 epel 833 k libprelude x86_64 5.2.0-2.el7 epel 312 kTransaction Summary=======================================================================================================================================Install 2 Packages (+3 Dependent packages)Total download size: 1.6 MInstalled size: 169 MIs this ok [y/d/N]: yDownloading packages:clamav-lib-0.103.8-3.el7.x86_64.rpm | 833 kB 00:00:00 clamav-0.103.8-3.el7.x86_64.rpm | 332 kB 00:00:00 libprelude-5.2.0-2.el7.x86_64.rpm | 312 kB 00:00:00 (1/2): clamav-filesystem-0.103.8-3.el7.noarch.rpm | 44 kB 00:00:00 (2/2): clamav-update-0.103.8-3.el7.x86_64.rpm | 128 kB 00:00:00 ---------------------------------------------------------------------------------------------------------------------------------------Total 375 kB/s | 172 kB 00:00:00 Running transaction checkRunning transaction testTransaction test succeededRunning transaction Installing : clamav-filesystem-0.103.8-3.el7.noarch 1/5 Installing : libprelude-5.2.0-2.el7.x86_64 2/5 Installing : clamav-lib-0.103.8-3.el7.x86_64 3/5 Installing : clamav-update-0.103.8-3.el7.x86_64 4/5 Installing : clamav-0.103.8-3.el7.x86_64 5/5 Verifying : clamav-lib-0.103.8-3.el7.x86_64 1/5 Verifying : clamav-0.103.8-3.el7.x86_64 2/5 Verifying : clamav-update-0.103.8-3.el7.x86_64 3/5 Verifying : libprelude-5.2.0-2.el7.x86_64 4/5 Verifying : clamav-filesystem-0.103.8-3.el7.noarch 5/5 Installed: clamav.x86_64 0:0.103.8-3.el7 clamav-update.x86_64 0:0.103.8-3.el7 Dependency Installed: clamav-filesystem.noarch 0:0.103.8-3.el7 clamav-lib.x86_64 0:0.103.8-3.el7 libprelude.x86_64 0:5.2.0-2.el7 Complete!3、更新病毒库
╰─➤ sudo freshclamClamAV update process started at Fri Mar 17 19:19:22 2023daily database available for download (remote version: 26846)Time: 37.2s, ETA: 0.0s [========================>] 58.09MiB/58.09MiBTesting database: '/var/lib/clamav/tmp.ed4624a48b/clamav-c849e4628dc5d60816a38448573fc4cf.tmp-daily.cvd' ...Database test passed.daily.cvd updated (version: 26846, sigs: 2026265, f-level: 90, builder: raynman)main database available for download (remote version: 62)Time: 1m 21s, ETA: 0.0s [========================>] 162.58MiB/162.58MiBBTesting database: '/var/lib/clamav/tmp.ed4624a48b/clamav-c670d6f3e7d50264033475d84d01e24b.tmp-main.cvd' ...Database test passed.main.cvd updated (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)bytecode database available for download (remote version: 334)Time: 2.2s, ETA: 0.0s [========================>] 285.12KiB/285.12KiBTesting database: '/var/lib/clamav/tmp.ed4624a48b/clamav-09d58acddd1cf9dc6bbaab2e2d8798d9.tmp-bytecode.cvd' ...Database test passed.bytecode.cvd updated (version: 334, sigs: 91, f-level: 90, builder: anvilleg)4、扫描病毒
╰─➤ sudo clamscan -r -i /usr/bin -l /var/log/clamscan.log --remove----------- SCAN SUMMARY -----------Known viruses: 8658192Engine version: 0.103.8Scanned directories: 1Scanned files: 1814Infected files: 0Data scanned: 379.08 MBData read: 363.75 MB (ratio 1.04:1)Time: 143.150 sec (2 m 23 s)Start Date: 2023:03:17 19:25:59End Date: 2023:03:17 19:28:22需要说明的参数：
这里递归扫描根目录 /usr/bin ，发现感染文件立即删除 -r 递归扫面子文件 –i 只显示被感染的文件 -l 指定日志文件 --remove 删除被感染文件 --move隔离被感染文件