Virus Event

dmillar

• March 25, 2021 12:15

Not sure I'm in the right place, so feel free to move me on. I'm trying to use VirusEvent to send virus alerts to email. I've written everything out in powershell, which tested correctly. In clamd.conf I'm writing the following: VirusEvent "C:\ClamAV\Email_Alert.ps1" "VIRUS FOUND: v%" I have the send to address in the ps file, so omitted it here. But I'm getting nothing. This is being used with a cloud file system, so we want everything scanned as it comes in. I've sent some rogue files over which were caught and deleted, but no email was sent. What am I doing wrong? Thanks

• 

  cPRex Jurassic Moderator

  • March 25, 2021 17:42

  Hey there! Are you hosted on a Windows system, or just testing in Powershell since that's what you have access to? Linux doesn't have any knowledge of the Windows-style command path you're using in that example, so that would need to be adjusted to work with Linux.

  0
• 

  dmillar

  • March 25, 2021 17:49

  Hi there. Hosted on a Windows Server. I actually just put in the word powershell and executed the entire line from cmd. It worked in sending the email (previously it would just open up a notepad with the text. But I don't know if this is how it is supposed to be written in clamd.conf. This is my new line: VirusEvent powershell "C:\ClamAV\Email_Alert.ps1" "VIRUS FOUND: v%" Powershell will not run this unless I have a subject inside, which I obviously had to add something, so I'm not sure VIRUS FOUND: v% will work.

  0
• 

  cPRex Jurassic Moderator

  • March 25, 2021 17:53

  Thanks for the additional details. Since cPanel tools only work on Linux systems I'm not sure anyone here is going to have any ideas to help with that as none of our tricks will apply to that environment. You may want to check out a forum like WebHostingTalk or even something specific to the ClamAV software for better details.

  0
• 

  dmillar

  • March 25, 2021 17:54

  Thanks

  0

Please sign in to leave a comment.