{"id":4635,"date":"2014-09-26T15:40:31","date_gmt":"2014-09-26T20:40:31","guid":{"rendered":"https:\/\/secure.rosehosting.com\/blog\/?p=4635"},"modified":"2022-12-15T06:55:56","modified_gmt":"2022-12-15T12:55:56","slug":"install-and-configure-linux-malware-detect-on-a-centos-vps","status":"publish","type":"post","link":"https:\/\/www.rosehosting.com\/blog\/install-and-configure-linux-malware-detect-on-a-centos-vps\/","title":{"rendered":"Install and configure Linux Malware Detect on a CentOS VPS"},"content":{"rendered":"
Linux Malware Detect or just Maldet is free and open source malware scanner for Linux machines. It scans the machine for known malwares and quarantine suspicious files or simply alert you for their presence.\u00a0 It uses threat data from network edge intrusion detection systems to extract malware that is actively being used in attacks and generates signatures for detection. In addition, threat data is also derived from user submissions with the LMD checkout feature and from malware community resources.<\/p>\n
<\/p>\n
In this tutorial we will show you how to install Linux Malware detect on your CentOS VPS<\/a>.<\/p>\n Log in to your server as user root and update the packages:<\/p>\n Now, go to Linux Malware Detect’s official website and download it to your server<\/p>\n Unpack the downloaded Linux Malware detect archive<\/p>\n Change the current working directory<\/p>\n And run the installation script<\/p>\n You should get the following output<\/p>\n Open Maldet’s configuration file<\/p>\n And change the following settings: There are more options that you can configure according to your needs.<\/p>\n After the installation a daily cronjob which checks for the latest version of Maldet and malware definition\/signature files is automatically created.<\/p>\n That’s all. Linux Malware Detect is installed and configured on your server.<\/p>\n To scan a directory you can use<\/p>\n To update Maldet use the below command<\/p>\n You can find the details on all options by executing<\/p>\n or read the README file.<\/p>\n Of course you don\u2019t have to do any of this if you use one of our Linux VPS Hosting<\/a> services, in which case you can simply ask our expert Linux admins to install Linux Malware Detect<\/strong> for you. They are available 24\u00d77 and will take care of your request immediately.<\/p>\n PS.<\/strong><\/span> If you liked this post please share it with your friends on the social networks using the buttons on the left or simply leave a reply below. Thanks.<\/p>\n","protected":false},"excerpt":{"rendered":" Linux Malware Detect or just Maldet is free and open source malware scanner for Linux machines. It scans the machine … <\/p>\nyum update -y<\/pre>\n
wget http:\/\/www.rfxn.com\/downloads\/maldetect-current.tar.gz<\/pre>\n
tar xfz maldetect-current.tar.gz<\/pre>\n
cd maldetect-*<\/pre>\n
.\/install.sh<\/pre>\n
Linux Malware Detect v1.4.2\r\n(C) 2002-2013, R-fx Networks <proj@r-fx.org>\r\n(C) 2013, Ryan MacDonald <ryan@r-fx.org>\r\ninotifywait (C) 2007, Rohan McGovern <rohan@mcgovern.id.au>\r\nThis program may be freely redistributed under the terms of the GNU GPL\r\n\r\ninstallation completed to \/usr\/local\/maldetect\r\nconfig file: \/usr\/local\/maldetect\/conf.maldet\r\nexec file: \/usr\/local\/maldetect\/maldet\r\nexec link: \/usr\/local\/sbin\/maldet\r\nexec link: \/usr\/local\/sbin\/lmd\r\ncron.daily: \/etc\/cron.daily\/maldet\r\n\r\nmaldet(776): {sigup} performing signature update check...\r\nmaldet(776): {sigup} local signature set is version 201205035915\r\nmaldet(776): {sigup} new signature set (2014082316728) available\r\nmaldet(776): {sigup} downloaded http:\/\/cdn.rfxn.com\/downloads\/md5.dat\r\nmaldet(776): {sigup} downloaded http:\/\/cdn.rfxn.com\/downloads\/hex.dat\r\nmaldet(776): {sigup} downloaded http:\/\/cdn.rfxn.com\/downloads\/rfxn.ndb\r\nmaldet(776): {sigup} downloaded http:\/\/cdn.rfxn.com\/downloads\/rfxn.hdb\r\nmaldet(776): {sigup} downloaded http:\/\/cdn.rfxn.com\/downloads\/maldet-clean.tgz\r\nmaldet(776): {sigup} signature set update completed\r\nmaldet(776): {sigup} 11788 signatures (9895 MD5 \/ 1893 HEX)<\/pre>\n
nano \/usr\/local\/maldetect\/conf.maldet<\/pre>\n
\nemail_alert=1<\/strong><\/em> – Enable email alerts
\nemail_addr=”user@yourdomain.tld”<\/strong><\/em> – Enter the destination address for email alerts
\nquar_hits=<\/strong>1<\/strong><\/em> – Move the detected malware to quarantine and send an alert
\nquar_clean=1<\/strong><\/em> – Try to clean the detected malware injections<\/p>\nmaldet -a \/path\/to\/directory<\/pre>\n
maldet -u<\/pre>\n
maldet - h<\/pre>\n