KB09032301 Installing clamAV Anti-virus

Integrating Clam Antivirus 0.97 with Mailtraq

Clam has been updated and re-structured and now requires a different installation method to previous versions.

Step 1 - Download and install ClamAV on your machine.

Create a folder in the root of C-drive here: C:\clamav

Download the Mailtraq ClamAV package from here: ClamAV for Mailtraq and unpack it into C:\clamav

For example:
Download and open the file in explorer (it is a Zip file), then drag the "clamav" directory to your "c:\" drive

You must make sure there is a \db folder for Clam, as this is where Freshclam will place the setup database and future updates. Check you have a folder 'C:\clamav\db' - if not, then make one manually.

Now, locate and execute freshclam.exe   This will download your initial database.

Step 2 - Schedule 'Freshclam' - the virus signature updater.

You should update clamAV's virus signatures regularly by running C:\clamAV\freshclam.exe   
 which is included in the download above.

This should be set to run at least daily as a Windows Scheduled task^?

You should check from time to time that the updates are happening as expected.

You can confirm the update is working by checking the version status and update date & time in the Mailtraq Anti-Virus Manager dialog.

Step 3 - Configure Mailtraq

Open the Mailtraq Console, Options | Anti Virus Integration ...

The Anti-Virus Manager will open (see image, right)

Click on the 'CLAM' line to select it, and click the [Properties] button (don't worry that it says it can't connect to it yet, that is simply because you haven't told it where to find it...)

The 'ClamD Configuration' dialog will open.

Set ClamD to use Port 3310, (adjusting any firewall restrictions required elsewhere on your system),
Set the Path to clamd.exe to "c:\clamav\clamd.exe"

Tip:
If the Mailtraq anti-virus dialogue appears to freeze, use the Windows Task Manager to find and kill the "clamd.exe" process and repeat step (4).  This can happen if there is an existing installation or if it locks up during first execution. 

Then, [OK] back to the Console.

The status line should now show Installed as 'Yes' and Status as 'Operational'

Ensure the checkbox against CLAM is checked to tell Mailtraq to run the emails through CLAM.

Mailtraq will now manage starting and running ClamAV.

Testing
Mailtraq can run a test against the industry standard EICAR-AV-Test by using the [Test] button in the main Manager window.
Be aware other Antivirus software on the machine can prevent the test from completing.