Installing on Your Linux Cloud server
You must first install ClamAV virus scanner on your server before you attempt to run a scan. All WHM/cPanel servers come with the ability to download and install ClamAV, however it is not installed by default and must be downloaded and configured before running a scan.
To install download and install ClamAV:
Navigate to Home » cPanel » Manage Plugins
You will see options to download and install multiple cPanel plugins, however you are looking for the following:
Click the Install “ClamAV for cPanel” icon
This will download the ClamAV software to your server.
Note: The installation may take several minutes to run and complete.
You should see a confirmation similar to the one below when the download and installation is completed:
Configuring ClamAV for Cloud
To get to the configuration screen for ClamAV you will have to go back to the WHM Home screen and click the Plugins icon.
From there, click the configure ClamAV Scanner Icon
This page will look like the following:
Note: This configuration page does NOT run the scan and only gives permissions to the cPanel accounts on the server to run the different types of scans. This is only the setup page. To run a scan you must first log into the cPanel account to begin the scan for each individual cPanel account. (See below after configuring ClamAV)
ClamAV allows you to set scanning permissions globally for all cPanel account on the server (top) or individually for each cPanel user (bottom).
You have the ability to select what files you wish to have scanned. If you suspect that your site is compromised it is recommended that you scan all 4 services.
Select the services that you wish to allow your cPanel users to scan.
- Scan Entire Home Directory — Scans your server's home directory.
- Scan Mail — Scans all of your server's mail folders.
- Scan Public FTP Space — Scans all folders that FTP users can access.
- Scan Public Web Space — Scans all folders that web visitors can access.
Starting a Scan in cPanel
To start a scan for a specific cPanel user account, you will need to log directly into the account. This can be done from inside fo WHM by going to List Accounts and clicking the cPanel icon or by directly logging into the cPanel account. Once logged in, scroll down to the “Advanced” section and click on “Virus Scanner.”
Once inside of the Virus Scanner, you will be prompted to select the individual service you wish to scan. Services must be scanned one at a time. Select the service you wish to scan and start the scan.
Important Note: If you want to monitor the progress of the scan it is imperative that you leave the Virus scan progress tab open. Once closed, you will not be able to reopen it.
The in-progress window will show you the status of the scan:
File: The number of files that the scan processed out of the total number of files that exist in the specified directory.
Data: The amount of data processed out of the total amount of data that exists in the specified directory.
Scanner Progress: Displays the scan's progress.
Infected Files: The files that the scan reported to contain malicious software.
A scan may require several minutes to complete. After the scan completes, the system returns you to the Virus Scanner interface.
Once the scan is completed you will be taken to the Cleanup Process page where you can either “Quarantine” “Destroy” or “Ignore” any found issues. It is highly recommended that if you find an infected file your reach out ot Cozaq immediately to address the issue. We will have our System Administration team take a look at the issue to determine the best course of action moving forward and to ensure that the removal of a file will not affect your sites operability.
Additional ClamAV features:
- Cron Jobs - Your server can be set up to regularly scan itself during off peak hours. Please reach out to the Cozaq Support team for assistance is setting regularly scheduled off hour scans.
- Mail Scan - ClamAV has the ability to scan both incoming and outgoing mail. Because these scans use your servers resources and can affect server performance they are not set up by default. Please reach out to us to determine if theses setting are best for you.