Kaspersky Anti‐virus - SpamTagger/SpamTagger-Plus GitHub Wiki

Deprecated

Kaspersky is no longer supported. MailCleaner will no longer renew or issue new reseller licenses. If you still want to use it, you will need to obtain your own license.

Installation

You will need to upload your Kaspersky key file then run:

/usr/mailcleaner/install/install_options.sh --kaspersky

When prompted, provide the path to the .key file. This will install the Kaspersky package, insert an entry to activate it into the database, update the signatures, then restart the filtering engine.

Removal

If you no longer wish to use Kaspersky, you can remove it as follows.

First, disable it as a virus scanner on the master host:

echo 'delete from antivirus where scanners = "kaspersky";' | mc_mysql -m mc_config
echo 'update scanner set active = 0 where name = "kaspersky";' | mc_mysql -m mc_config

Then, stop the service on each host:

/usr/mailcleaner/etc/init.d/kaspersky stop

and restart MailScanner on each:

/usr/mailcleaner/etc/init.d/mailscanner restart

Next, you can remove the package completely:

apt-get remove kaspersky-*

Remove unnecessary files if they still exist:

rm -rf /opt/kaspersky*

Administration

Here are few commands for administering the Kaspersky antivirus in MailCleaner.

Manage Daemon

The daemon handles Kaspersky Kavehost in order to launch the server that will be called by the client for antivirus scanning. You have the ability to stop, start or restart the server Kavehost:

Usage:    /usr/mailcleaner/etc/init.d/kaspersky  {start|stop|restart}

Updates

Kaspersky is updated automatically every 30 minutes via: /opt/kaspersky-updater/kaspersky-update.sh present in the crontab.

The updates are logged to /var/mailcleaner/log/kaspersky/kaspersky_updater.log.

The virus signature databases are downloaded to at /var/mailcleaner/kaspersky/bases.

Statistics

To compile statistics, we provide a tool that allows you to have information about the detection of kaspersky (number of viruses found, the different viruses, etc.)

To do this, simply run the script:

/opt/kaspersky/kavreport.sh

This will output something like:

Daily Kaspersky statistics:
---------------------------
Number of Virus detected: 	 	 5
List of virus detected:
	 	 	 1) Trojan-Downloader.Win32.Upatre.eoyr
	 	 	 2) Email-Worm.Win32.Mydoom.m
	 	 	 3) Trojan.Win32.Bayrob.fde
	 	 	 4) Trojan.Win32.Bayrob.drx