Clamav:ConfigurationOptions

ClamAv Options

Configuration options for ClamAV 0.102.4

Note that 'Default' comes before the option

List of Options

Default: disabled

LogFile /var/log/clamd.scan

Default: no

LogFileUnlock yes

Default: 1M

LogFileMaxSize 2M

Default: no

LogTime yes

Default: no

LogClean yes

Default: no

LogSyslog yes

Default: LOG_LOCAL6

LogFacility LOG_MAIL

Default: no

LogVerbose yes

Default: no

LogRotate yes

Default: no

PreludeEnable yes

Default: ClamAV

PreludeAnalyzerName ClamAV

ExtendedDetectionInfo yes

Default: disabled

PidFile /run/clamd.scan/clamd.pid

Default: system specific (usually /tmp or /var/tmp).

TemporaryDirectory /var/tmp

Default: hardcoded (depends on installation options)

DatabaseDirectory /var/lib/clamav

Default: no

OfficialDatabaseOnly no

Default: disabled (must be specified by a user)

LocalSocket /run/clamd.scan/clamd.sock

Default: disabled (the primary group of the user running clamd)

LocalSocketGroup virusgroup

Default: disabled (socket is world accessible)

LocalSocketMode 660

Default: yes

FixStaleSocket yes

Default: no

TCPSocket 3310

Default: no

TCPAddr 127.0.0.1

Default: 200

MaxConnectionQueueLength 30

Default: 25M

StreamMaxLength 10M

Default: 1024

StreamMinPort 30000

Default: 2048

StreamMaxPort 32000

Default: 10

MaxThreads 20

Default: 120

ReadTimeout 300

Default: 30

CommandReadTimeout 30

Default: 500

SendBufTimeout 200

Default: 100

MaxQueue 200

Default: 30

IdleTimeout 60

Default: scan all

ExcludePath ^/proc/

ExcludePath ^/sys/

Default: 15

MaxDirectoryRecursion 20

Default: no

FollowDirectorySymlinks yes

Default: no

FollowFileSymlinks yes

Default: yes

CrossFilesystems yes

Default: 600 (10 min)

SelfCheck 600

Default: no

VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"

Default: don't drop privileges

User clamscan

ExitOnOOM yes

Default: no

Foreground yes

Default: no

Debug yes

Default: no

LeaveTemporaryFiles yes

Default: yes

AllowAllMatchScan no

Default: no

DetectPUA yes

Default: Load all categories (if DetectPUA is activated)

ExcludePUA NetTool

ExcludePUA PWTool

Default: Load all categories (if DetectPUA is activated)

IncludePUA Spy

IncludePUA Scanner

IncludePUA RAT

ForceToDisk yes

Default, the engine will store an MD5 in a cache of any files that are

Default: no

DisableCache yes

Default: yes

HeuristicAlerts yes

Default: no

HeuristicScanPrecedence yes

Default: no

AlertBrokenExecutables yes

Default: no

AlertEncrypted yes

Default: no

AlertEncryptedArchive yes

Default: no

AlertEncryptedDoc yes

Default: no

AlertOLE2Macros yes

Default: no

AlertPhishingSSLMismatch yes

Default: no

AlertPhishingCloak yes

Default: no

AlertPartitionIntersection yes

Default: yes

ScanPE yes

Default: no

DisableCertCheck yes

Default: yes

ScanELF yes

Default: yes

ScanOLE2 yes

Default: yes

ScanPDF yes

Default: yes

ScanSWF yes

Default: yes

ScanXMLDOCS yes

Default: yes

ScanHWP3 yes

Default: yes

ScanMail yes

Default: no

ScanPartialMessages yes

Default: yes

PhishingSignatures no

Default: yes

PhishingScanURLs no

Default: No

StructuredDataDetection yes

Default: 3

StructuredMinCreditCardCount 5

Default: 3

StructuredMinSSNCount 5

Default: yes

StructuredSSNFormatNormal yes

Default: no

StructuredSSNFormatStripped yes

Default: yes

ScanHTML yes

Default: yes

ScanArchive yes

Default: 120000

MaxScanTime 300000

Default: 100M

MaxScanSize 150M

Default: 25M

MaxFileSize 30M

Default: 16

Default: 10000

MaxFiles 15000

Default: 10M

Default: 10M

MaxHTMLNormalize 10M

Default: 2M

MaxHTMLNoTags 2M

Default: 5M

MaxScriptNormalize 5M

Default: 1M

MaxZipTypeRcg 1M

Default: 50

MaxPartitions 128

Default: 100

MaxIconsPE 200

Default: 16

MaxRecHWP3 16

Default: 100000

PCREMatchLimit 20000

Default: 2000

PCRERecMatchLimit 10000

Default: 25M

PCREMaxFileSize 100M

Default: no

AlertExceedsMax yes

Default: 5M

OnAccessMaxFileSize 10M

Default: 5

OnAccessMaxThreads 10

Default: 5000 (5 seconds)

OnAccessCurlTimeout 10000

Default: no

OnAccessDisableDDD yes

Default: disabled

OnAccessIncludePath /home

OnAccessIncludePath /students

Default: disabled

OnAccessExcludePath /home/user

Default: no

OnAccessPrevention yes

Default: no

OnAccessDenyOnError yes

Default: no

OnAccessExtraScanning yes

Default: disabled

OnAccessMountPath /

OnAccessMountPath /home/user

Default: no

OnAccessExcludeRootUID no

Default: disabled

OnAccessExcludeUID -1

Default: disabled

OnAccessExcludeUname clamav

Default: 0

OnAccessRetryAttempts 3

Default: yes

Bytecode yes

Default: TrustSigned

BytecodeSecurity TrustSigned

Default: 5000

BytecodeTimeout 1000

---