База знань

mkdir /tmp/virus
clamscan -ri --move=/tmp/virus /home/

When started by a superuser it drops privileges and switches to the clamav user. freshclam uses the database.clamav.net round-robin DNS which automatically selects a database mirror9.1. freshclam is an advanced tool: it supports database version verification through DNS, proxy servers (with authentication), digital signatures and various error scenarios. Quick test: run freshclam (as superuser) with no parameters and check the output. If everything is OK you may create the log file in /var/log (owned by clamav or another user freshclam will be running as (--user)
#touch /var/log/freshclam.log
#chmod 600 /var/log/freshclam.log
#chown clamav /var/log/freshclam.log
Now you should edit the configuration file (freshclam.conf or clamd.conf if they’re merged) and configure the UpdateLogFile directive to point to the created log file. Finally, to run freshclam in the daemon mode, execute

Download : http://downloads.sourceforge.net/clamav/clamav-0.97.2.tar.gz
PGP sig  : http://downloads.sourceforge.net/clamav/clamav-0.97.2.tar.gz.sig
Bugfixes : http://www.clamav.net/release-info/bugs/0.97.2
ChangeLog: http://www.clamav.net/release-info/changelog/0.97.2

cron for auto search of clamav

11 3 * * * /usr/local/bin/clamscan -ir /home --exclude-dir='/home/virtfs|/home/.cpan|/home/.cpcpan' -l /var/log/clamscan.log --move=/tmp/virus