{"id":47272,"date":"2026-06-27T22:44:56","date_gmt":"2026-06-27T13:44:56","guid":{"rendered":"https:\/\/raybeam.jp\/docs\/initial-server-setup\/how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware\/"},"modified":"2026-06-27T22:45:23","modified_gmt":"2026-06-27T13:45:23","slug":"how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware","status":"publish","type":"docs","link":"https:\/\/raybeam.jp\/es\/docs\/initial-server-setup\/how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware\/","title":{"rendered":"C\u00f3mo instalar y configurar ClamAV para que analice regularmente su servidor en busca de malware"},"content":{"rendered":"<p class=\"is-style-text-annotation is-style-text-annotation--1 wp-block-paragraph\">Este art\u00edculo asume que utilizar\u00e1 el Servidor Ubuntu 20.04 o 24.04.<\/p>\n\n\n\n<h2 id=\"motivation\" class=\"wp-block-heading\">Motivaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Busque virus y malware de forma regular y directamente en el servidor consumiendo pocos recursos.<\/p>\n\n\n\n<h2 id=\"alternatives\" class=\"wp-block-heading\">Alternativas<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.rfxn.com\/projects\/linux-malware-detect\/\">LMD (maldet)<\/a> en su servidor o los plugins de WordPress <a href=\"https:\/\/www.wordfence.com\/\">Wordfence<\/a> y <a href=\"https:\/\/nintechnet.com\/ninjascanner\/\">NinjaScanner<\/a> son buenas opciones.<\/p>\n\n\n\n<h2 id=\"install-clamav\" class=\"wp-block-heading\">Instalar ClamAV<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ClamAV es parte de WordOps Stack y se puede instalar con (necesitamos instalar tambi\u00e9n dos paquetes adicionales):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install --clamav\nsudo apt install clamav-daemon clamdscan -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Tambi\u00e9n puede instalarlo en Ubuntu con APT:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\nsudo apt install clamav clamav-daemon clamdscan -y<\/code><\/pre>\n\n\n\n<h2 id=\"add-custom-database-signatures\" class=\"wp-block-heading\">A\u00f1adir firmas personalizadas a la base de datos<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para mejorar las capacidades de detecci\u00f3n de malware y virus, puede incorporar opcionalmente las firmas de base de datos que ofrece <a href=\"https:\/\/www.rfxn.com\/projects\/linux-malware-detect\/\">Linux Malware Detect (LMD) de RFXN<\/a>com\u00fanmente conocido como maldet. A\u00f1ada la siguiente configuraci\u00f3n al final del archivo<em> <code class=\"\">\/etc\/clamav\/freshclam.conf<\/code><\/em> file:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Base de datosCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.ndb\nBase de datosCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.hdb\nBase de datosCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.yara<\/code><\/pre>\n\n\n\n<h2 id=\"perform-a-full-scan-of-your-files\" class=\"wp-block-heading\">Realice un an\u00e1lisis completo de sus archivos<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Actualicemos ahora manualmente la base de datos de virus antes de ejecutarla (puede ser necesario detener el <em>clamav-freshclam<\/em> para que podamos ejecutarlo manualmente):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl stop clamav-freshclam.service\nsudo freshclam<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Y ejecute un escaneo completo en nuestro directorio de sitios:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo clamscan -r \/var\/www<\/code><\/pre>\n\n\n\n<h2 id=\"enable-clamav-as-a-service-and-schedule-a-cron-job\" class=\"wp-block-heading\">Habilite ClamAV como servicio y programe una tarea cron<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hay dos formas de ejecutar ClamaV, con el comando independiente <em>clamscan<\/em> o con la alternativa <em>clamdscan<\/em>que accede al demonio de servicio y almacena la base de datos de virus directamente en memoria, con un rendimiento mucho mejor. Iniciemos y habilitemos los demonios requeridos con lo siguiente:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl start clamav-freshclam.service\nsudo systemctl enable clamav-freshclam.service\nsudo systemctl start clamav-daemon.service\nsudo systemctl enable clamav-daemon.service<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">El siguiente comando est\u00e1 dise\u00f1ado para escanear s\u00f3lo los archivos nuevos o modificados en las \u00faltimas 25 horas. Puede instalarlo en su sudo crontab. Adem\u00e1s, tienes la opci\u00f3n de configurar tu correo electr\u00f3nico al principio para recibir notificaciones despu\u00e9s de cada escaneo.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>MAILTO=\"<span \n                data-original-string='iYy8icGaLN+75T+2STLoAg==a66IeK59M0gnQytHwl4lngm9v085wNH4fAEtsO42GAUsvY='\n                class='apbct-email-encoder'\n                title='Este contacto ha sido codificado por Anti-Spam by CleanTalk. Haz clic para decodificar. Para finalizar la decodificaci\u00f3n, aseg\u00farate de que JavaScript est\u00e1 activado en tu navegador.'>al<span class=\"apbct-blur\">****<\/span>@<span class=\"apbct-blur\">*****<\/span>le.com<\/span>\"\n0 2 * * * find \/var\/www -type f -mmin -1500 -print0 | xargs -0 clamdscan --fdpass --multiscan --infected<\/code><\/pre>\n\n\n\n<div class=\"wp-block-group is-style-default has-small-font-size has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\">Recursos:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.liquidweb.com\/blog\/linux-malware-detect-ubuntu-20-04\/\">https:\/\/www.liquidweb.com\/blog\/linux-malware-detect-ubuntu-20-04\/<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/malware.expert\/howto\/extending-clamav-signatures-with-rfxn-database-for-php-malwares\">https:\/\/malware.expert\/howto\/extending-clamav-signatures-with-rfxn-database-for-php-malwares<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tcpip.wtf\/en\/clamav-scan-only-new-modified-files.htm\">https:\/\/tcpip.wtf\/en\/clamav-scan-only-new-modified-files.htm<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/radeksprta.eu\/posts\/automatic-clamav-scans-with-email-notifications\/\">https:\/\/radeksprta.eu\/posts\/automatic-clamav-scans-with-email-notifications\/<\/a><\/li>\n<\/ul>\n<\/div>","protected":false},"featured_media":0,"parent":47233,"menu_order":1,"comment_status":"open","ping_status":"closed","template":"","meta":{"pmpro_default_level":"","nav_title":"","positive":"","negative":"","footnotes":""},"docs_category":[],"class_list":["post-47272","docs","type-docs","status-publish","hentry","pmpro-has-access"],"_links":{"self":[{"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs\/47272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/comments?post=47272"}],"version-history":[{"count":1,"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs\/47272\/revisions"}],"predecessor-version":[{"id":47273,"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs\/47272\/revisions\/47273"}],"up":[{"embeddable":true,"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs\/47233"}],"wp:attachment":[{"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/media?parent=47272"}],"wp:term":[{"taxonomy":"docs_category","embeddable":true,"href":"https:\/\/raybeam.jp\/es\/wp-json\/wp\/v2\/docs_category?post=47272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}