ClamAV - ClamScan & CPU 100%

5 posts / 0 new
Last post
#1 Sat, 11/16/2019 - 09:54
LuigiMdg
LuigiMdg's picture

ClamAV - ClamScan & CPU 100%

Hi, I've stopped and disabled the bootup of the processes clamav-daemon and clamav-freshclam but every 60 minutes if I take the command top I can watch 2-3 processes name clamscan that use 40/50% of CPU..

How to disable this scan?

In /var/log/clamav/freshclam.log the content is static, in /var/log/clamav/clamav.log this is the content:

Sat Nov 16 14:53:13 2019 -> +++ Started at Sat Nov 16 14:53:13 2019
Sat Nov 16 14:53:13 2019 -> Received 0 file descriptor(s) from systemd.
Sat Nov 16 14:53:13 2019 -> clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Sat Nov 16 14:53:13 2019 -> Log file size limited to 4294967295 bytes.
Sat Nov 16 14:53:13 2019 -> Reading databases from /var/lib/clamav
Sat Nov 16 14:53:13 2019 -> Not loading PUA signatures.
Sat Nov 16 14:53:13 2019 -> Bytecode: Security mode set to "TrustSigned".
Sat Nov 16 14:54:52 2019 -> Loaded 6548684 signatures.
Sat Nov 16 14:54:56 2019 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Sat Nov 16 14:54:56 2019 -> LOCAL: Setting connection queue length to 15
Sat Nov 16 14:54:56 2019 -> Limits: Global size limit set to 104857600 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: File size limit set to 26214400 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: Recursion level limit set to 10.
Sat Nov 16 14:54:56 2019 -> Limits: Files limit set to 10000.
Sat Nov 16 14:54:56 2019 -> Limits: MaxEmbeddedPE limit set to 10485760 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: MaxHTMLNormalize limit set to 10485760 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: MaxHTMLNoTags limit set to 2097152 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: MaxScriptNormalize limit set to 5242880 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: MaxZipTypeRcg limit set to 1048576 bytes.
Sat Nov 16 14:54:56 2019 -> Limits: MaxPartitions limit set to 50.
Sat Nov 16 14:54:56 2019 -> Limits: MaxIconsPE limit set to 100.
Sat Nov 16 14:54:56 2019 -> Limits: MaxRecHWP3 limit set to 16.
Sat Nov 16 14:54:56 2019 -> Limits: PCREMatchLimit limit set to 10000.
Sat Nov 16 14:54:56 2019 -> Limits: PCRERecMatchLimit limit set to 5000.
Sat Nov 16 14:54:56 2019 -> Limits: PCREMaxFileSize limit set to 25.
Sat Nov 16 14:54:56 2019 -> Archive support enabled.
Sat Nov 16 14:54:56 2019 -> Algorithmic detection enabled.
Sat Nov 16 14:54:56 2019 -> Portable Executable support enabled.
Sat Nov 16 14:54:56 2019 -> ELF support enabled.
Sat Nov 16 14:54:56 2019 -> Mail files support enabled.
Sat Nov 16 14:54:56 2019 -> OLE2 support enabled.
Sat Nov 16 14:54:56 2019 -> PDF support enabled.
Sat Nov 16 14:54:56 2019 -> SWF support enabled.
Sat Nov 16 14:54:56 2019 -> HTML support enabled.
Sat Nov 16 14:54:56 2019 -> XMLDOCS support enabled.
Sat Nov 16 14:54:56 2019 -> HWP3 support enabled.
Sat Nov 16 14:54:56 2019 -> Self checking every 3600 seconds.
Sat Nov 16 15:54:56 2019 -> SelfCheck: Database status OK.
Mon, 11/18/2019 - 07:48
dowell22

If you set it to virus scan your incoming mails, that's probably it. Try disabling it on features and plugins

Wed, 11/20/2019 - 15:24 (Reply to #2)
LuigiMdg
LuigiMdg's picture

Where is features and plugins?

Thu, 11/21/2019 - 20:03
dowell22

Virtualmin tab > Systems Settings > Features & Plugins

Fri, 11/22/2019 - 11:39
LuigiMdg
LuigiMdg's picture

How to disable it?

I receive this error: Failed to save enabled features : The feature Virus filtering cannot be disabled, as it is used by the following virtual servers : "list of virtual servers.."

Topic locked