{"id":47272,"date":"2026-06-27T22:44:56","date_gmt":"2026-06-27T13:44:56","guid":{"rendered":"https:\/\/raybeam.jp\/docs\/initial-server-setup\/how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware\/"},"modified":"2026-06-27T22:45:23","modified_gmt":"2026-06-27T13:45:23","slug":"how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware","status":"publish","type":"docs","link":"https:\/\/raybeam.jp\/pt\/docs\/initial-server-setup\/how-to-install-and-configure-clamav-to-scan-your-server-regularly-for-malware\/","title":{"rendered":"Como instalar e configurar o ClamAV para verificar seu servidor regularmente em busca de malware"},"content":{"rendered":"<p class=\"is-style-text-annotation is-style-text-annotation--1 wp-block-paragraph\">Este artigo pressup\u00f5e que voc\u00ea usar\u00e1 o Ubuntu Server 20.04 ou 24.04.<\/p>\n\n\n\n<h2 id=\"motivation\" class=\"wp-block-heading\">Motiva\u00e7\u00e3o<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Fa\u00e7a a varredura de v\u00edrus e malware regularmente e diretamente no servidor, consumindo poucos recursos.<\/p>\n\n\n\n<h2 id=\"alternatives\" class=\"wp-block-heading\">Alternativas<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.rfxn.com\/projects\/linux-malware-detect\/\">LMD (maldet)<\/a> em seu servidor ou nos plug-ins do WordPress <a href=\"https:\/\/www.wordfence.com\/\">Wordfence<\/a> e <a href=\"https:\/\/nintechnet.com\/ninjascanner\/\">NinjaScanner<\/a> s\u00e3o boas op\u00e7\u00f5es.<\/p>\n\n\n\n<h2 id=\"install-clamav\" class=\"wp-block-heading\">Instalar o ClamAV<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">O ClamAV faz parte do WordOps Stack e pode ser instalado com (precisamos instalar tamb\u00e9m dois pacotes adicionais):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo stack install --clamav\nsudo apt install clamav-daemon clamdscan -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Voc\u00ea tamb\u00e9m pode instal\u00e1-lo no Ubuntu com o APT:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\nsudo apt install clamav clamav-daemon clamdscan -y<\/code><\/pre>\n\n\n\n<h2 id=\"add-custom-database-signatures\" class=\"wp-block-heading\">Adicionar assinaturas de banco de dados personalizadas<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para aprimorar os recursos de detec\u00e7\u00e3o de malware e v\u00edrus, voc\u00ea pode incorporar opcionalmente as assinaturas de banco de dados oferecidas pelo <a href=\"https:\/\/www.rfxn.com\/projects\/linux-malware-detect\/\">Detec\u00e7\u00e3o de malware para Linux (LMD) da RFXN<\/a>comumente chamado de maldet. Anexe a seguinte configura\u00e7\u00e3o ao final do arquivo<em> <code class=\"\">\/etc\/clamav\/freshclam.conf<\/code><\/em> file:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>DatabaseCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.ndb\nDatabaseCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.hdb\nDatabaseCustomURL https:\/\/www.rfxn.com\/downloads\/rfxn.yara<\/code><\/pre>\n\n\n\n<h2 id=\"perform-a-full-scan-of-your-files\" class=\"wp-block-heading\">Executar uma verifica\u00e7\u00e3o completa de seus arquivos<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos agora atualizar manualmente o banco de dados de v\u00edrus antes de execut\u00e1-lo (pode ser necess\u00e1rio interromper o <em>clamav-freshclam<\/em> para que possamos execut\u00e1-lo manualmente):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl stop clamav-freshclam.service\nsudo freshclam<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">E execute uma verifica\u00e7\u00e3o completa em nosso diret\u00f3rio de sites:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo clamscan -r \/var\/www<\/code><\/pre>\n\n\n\n<h2 id=\"enable-clamav-as-a-service-and-schedule-a-cron-job\" class=\"wp-block-heading\">Habilite o ClamAV como um servi\u00e7o e agende um trabalho cron<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">H\u00e1 duas maneiras de executar o ClamAV, com o comando aut\u00f4nomo <em>clamscan<\/em> ou com a alternativa <em>clamdscan<\/em>que acessa o daemon de servi\u00e7o e armazena o banco de dados de v\u00edrus diretamente na mem\u00f3ria, com um desempenho muito melhor. Vamos iniciar e ativar os daemons necess\u00e1rios com o seguinte:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl start clamav-freshclam.service\nsudo systemctl enable clamav-freshclam.service\nsudo systemctl start clamav-daemon.service\nsudo systemctl enable clamav-daemon.service<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">O comando a seguir foi projetado para verificar apenas os arquivos novos ou modificados nas \u00faltimas 25 horas. Voc\u00ea pode instal\u00e1-lo em seu sudo crontab. Al\u00e9m disso, voc\u00ea tem a op\u00e7\u00e3o de configurar seu e-mail no in\u00edcio para receber notifica\u00e7\u00f5es ap\u00f3s cada verifica\u00e7\u00e3o.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>MAILTO=\"<span \n                data-original-string='Ikqy+fNpDY4cGqCnnZN0ug==a66iSAwYFEj8hl0oJXCyxLumZy0JlcVuXedxFpq\/vT3oVc='\n                class='apbct-email-encoder'\n                title='Esse contato foi codificado pelo Anti-Spam da CleanTalk. Clique para decodificar. Para concluir a decodifica\u00e7\u00e3o, certifique-se de que o JavaScript esteja ativado em seu navegador.'>al<span class=\"apbct-blur\">****<\/span>@<span class=\"apbct-blur\">*****<\/span>le.com<\/span>\"\n0 2 * * * * find \/var\/www -type f -mmin -1500 -print0 | xargs -0 clamdscan --fdpass --multiscan --infected<\/code><\/pre>\n\n\n\n<div class=\"wp-block-group is-style-default has-small-font-size has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\">Recursos:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.liquidweb.com\/blog\/linux-malware-detect-ubuntu-20-04\/\">https:\/\/www.liquidweb.com\/blog\/linux-malware-detect-ubuntu-20-04\/<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/malware.expert\/howto\/extending-clamav-signatures-with-rfxn-database-for-php-malwares\">https:\/\/malware.expert\/howto\/extending-clamav-signatures-with-rfxn-database-for-php-malwares<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tcpip.wtf\/en\/clamav-scan-only-new-modified-files.htm\">https:\/\/tcpip.wtf\/en\/clamav-scan-only-new-modified-files.htm<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/radeksprta.eu\/posts\/automatic-clamav-scans-with-email-notifications\/\">https:\/\/radeksprta.eu\/posts\/automatic-clamav-scans-with-email-notifications\/<\/a><\/li>\n<\/ul>\n<\/div>","protected":false},"featured_media":0,"parent":47233,"menu_order":1,"comment_status":"open","ping_status":"closed","template":"","meta":{"pmpro_default_level":"","nav_title":"","positive":"","negative":"","footnotes":""},"docs_category":[],"class_list":["post-47272","docs","type-docs","status-publish","hentry","pmpro-has-access"],"_links":{"self":[{"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs\/47272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/comments?post=47272"}],"version-history":[{"count":1,"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs\/47272\/revisions"}],"predecessor-version":[{"id":47273,"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs\/47272\/revisions\/47273"}],"up":[{"embeddable":true,"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs\/47233"}],"wp:attachment":[{"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/media?parent=47272"}],"wp:term":[{"taxonomy":"docs_category","embeddable":true,"href":"https:\/\/raybeam.jp\/pt\/wp-json\/wp\/v2\/docs_category?post=47272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}