# clamAV remove files

**URL:** <https://help.nextcloud.com/t/clamav-remove-files/28621>\
**Category:** ℹ️ Support\
**Tags:** nc13\
**Created:** [March 8, 2018, 1:05pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621 "2018-03-08T13:05:35Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 8, 2018, 1:05pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/1 "2018-03-08T13:05:35Z")

</div>

Hello,

I installed clamAV in my NC13 installed server.  
Now this working by cron job. Excecuting fresh and inspect.  
And I will add remove option to infected files.  
Is there any affect to NC13. ??  
Is NC13 safely working by removing files by clamAV ??

---

<div class="post-metadata">

**Author:** ![Escubaer](https://help.nextcloud.com/user_avatar/help.nextcloud.com/escubaer/32/6091_2.png) [@Escubaer](https://help.nextcloud.com/u/Escubaer)\
**Post date:** [March 8, 2018, 2:06pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/2 "2018-03-08T14:06:47Z")

</div>

Do you have the app? [https://github.com/nextcloud/files\_antivirus](https://github.com/nextcloud/files_antivirus)

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 8, 2018, 4:00pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/3 "2018-03-08T16:00:44Z")

</div>

Escubaer-san,

Thank you for your answer.  
I will try files\_antivirus.

---

<div class="post-metadata">

**Author:** ![STrike](https://help.nextcloud.com/user_avatar/help.nextcloud.com/strike/32/15509_2.png) [@STrike](https://help.nextcloud.com/u/STrike)\
**Post date:** [March 8, 2018, 4:04pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/4 "2018-03-08T16:04:22Z")

</div>

Will this be a good idea to run sth like this on a small ARM? (e.g. raspberry pi? 😃 )

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 9, 2018, 2:23am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/5 "2018-03-09T02:23:16Z")

</div>

I installed files\_antivirus. set app.  
Working fine.

{  
“app”: “files\_antivirus”,  
“level”: 0,  
“message”: "Exit code :: 0 Response :: stdin: OK

----------- SCAN SUMMARY -----------  
Known viruses: 6431890  
Engine version: 0.99.3  
Scanned directories: 0  
Scanned files: 1  
Infected files: 0  
Data scanned: 0.88 MB  
Data read: 0.34 MB (ratio 2.55:1)  
Time: 19.877 sec (0 m 19 s)  
",  
“method”: “PUT”,  
“remoteAddr”: “?.?.?.?”,  
“reqId”: “WqHuaHaSo6lRSHRsXofpLAAAAAE”,  
“time”: “2018-03-09T11:16:28+09:00”,  
“url”: “/???/remote.php/webdav/work/www\_c\_rieger\_de\_nextcloud\_more\_secure\_using\_clamav.pdf”,  
“user”: “adminpetisen”,  
“userAgent”: “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36”,  
“version”: “13.0.0.14”  
}

---

<div class="post-metadata">

**Author:** ![Escubaer](https://help.nextcloud.com/user_avatar/help.nextcloud.com/escubaer/32/6091_2.png) [@Escubaer](https://help.nextcloud.com/u/Escubaer)\
**Post date:** [March 9, 2018, 8:16am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/6 "2018-03-09T08:16:02Z")

</div>

Depends on the number and the size of file uploads you plan. Test and monitor the CPU load I’d recommend.

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 9, 2018, 10:08am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/7 "2018-03-09T10:08:59Z")

</div>

Hello,  
I feel It takes a long time although the size is small.  
Probably I should tune the app or clamAV.  
I will research clamAV conguration.

---

<div class="post-metadata">

**Author:** ![budy](https://help.nextcloud.com/user_avatar/help.nextcloud.com/budy/32/697_2.png) [@budy](https://help.nextcloud.com/u/budy)\
**Post date:** [March 9, 2018, 2:13pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/8 "2018-03-09T14:13:16Z")

</div>

A RPi3 is probably too lightweight for some serious scanning. I had files\_antivirus installed on NC9 and it really slowed down the uploads of larger files, even on a 4 vCPU XEN guest. Also, this will limit the size of the files you can upload, since clamd will only be able to scan files, that fit into the main memory. I think though, that you can offload the scanning onto some other host, which then shouldn’t be a RPi, obviously.

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 10, 2018, 4:16am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/9 "2018-03-10T04:16:17Z")

</div>

Hello,  
Thank you for your suggestion.  
Because now not yet started the service for users, I deactivated NC13 antivirus. My KVM server has 3CPU.when scanning going working slow. I will try to scan from another server that implements clam daemon.

---

<div class="post-metadata">

**Author:** ![rullzer](https://help.nextcloud.com/user_avatar/help.nextcloud.com/rullzer/32/840_2.png) [@rullzer](https://help.nextcloud.com/u/rullzer)\
**Post date:** [March 10, 2018, 9:31am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/10 "2018-03-10T09:31:04Z")

</div>

Even if you have clamav running locally please consider using the daemon mode (socket). This is significantly faster.

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 11, 2018, 2:24am UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/11 "2018-03-11T02:24:05Z")

</div>

Thank you for your suggestion.  
I changed appli’s config. and daemoned clamd by systemctl. but now not working. although drop infected file on the folder. nothing occured. Is there any mistake ?? should i show any other configuration. i set auto scan to clamd service too. my environment CentOS7 and PHP7.1.

---

<div class="post-metadata">

**Author:** ![Hisashi\_Tanaka](https://help.nextcloud.com/user_avatar/help.nextcloud.com/hisashi_tanaka/32/8108_2.png) [@Hisashi\_Tanaka](https://help.nextcloud.com/u/Hisashi_Tanaka)\
**Post date:** [March 20, 2018, 3:19pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/12 "2018-03-20T15:19:20Z")

</div>

Finally working well. working very fast.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 3, 2024, 9:32pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/13 "2024-12-03T21:32:13Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 9, 2024, 2:22pm UTC](https://help.nextcloud.com/t/clamav-remove-files/28621/14 "2024-12-09T14:22:46Z")

</div>


