{"id":4836,"date":"2020-08-06T11:59:15","date_gmt":"2020-08-06T11:59:15","guid":{"rendered":"http:\/\/cloudminister.com\/?p=4836"},"modified":"2020-08-06T11:59:15","modified_gmt":"2020-08-06T11:59:15","slug":"install-configure-linux-malware-detect-centos","status":"publish","type":"post","link":"https:\/\/cloudminister.com\/blog\/install-configure-linux-malware-detect-centos\/","title":{"rendered":"How to install and configure Linux Malware Detect (LMD) on Centos Web Panel(CWP) 7 with alert?"},"content":{"rendered":"

Let’s talk about how to install and configure Linux Malware Detect (LMD) on Centos Web Panel(CWP) 7 with alert?<\/p>\n

Linux Malware Detect(LMD) is a malware detector and scanner for Linux, designed for shared hosting environments. LMD is released under GNU GPLV2 license, it can be installed on cPanel, WHM and Linux environments with together other detection tools such as ClamAV.\u00a0<\/span><\/p>\n

CWP doesn\u2019t provide LMD service in it\u2019s free version, it asks to take CWP pro for LMD service. You can install it from the terminal and scan for malware present in your server.<\/span><\/p>\n

Prerequisite<\/b><\/h2>\n

CWP<\/span><\/p>\n

Terminal access<\/span><\/p>\n

Root user (If not use sudo)<\/span><\/p>\n

ClamAV<\/span><\/p>\n

Install Linux Malware Detect (LMD)<\/b><\/h3>\n

Linux Malware Detect is not available in CentOS or Epel repository, you need to install it manually from source, by using the following command:<\/span><\/p>\n

First, go inside tmp directory,<\/span><\/p>\n

# cd \/tmp<\/span><\/p>\n

Now download and extract it from the source with the help of <\/span>wget<\/b> command:<\/span><\/p>\n

# wget http:\/\/www.rfxn.com\/downloads\/maldetect-current.tar.gz<\/span><\/p>\n

# tar -xzvf maldetect-current.tar.gz<\/span><\/p>\n

After downloaded go inside the maldetect directory and run the install script with the following command:<\/span><\/p>\n

# cd maldetect-*<\/span><\/p>\n

# .\/install.sh<\/span><\/p>\n

Now make a symlink of the maldet command in the \/bin\/maldet<\/span><\/p>\n

#\u00a0ln -s \/usr\/local\/maldetect\/maldet \/bin\/maldet<\/span><\/p>\n

# hash -r<\/span><\/p>\n

Configure Linux Malware Detect (LMD)<\/b><\/h3>\n

LMD has been installed into the \/usr\/local\/maldet\/ directory. Open the directory and edit the configuration file conf.maldet with vi editor:<\/span><\/p>\n

# cd \/usr\/local\/maldetect\/<\/span><\/p>\n

# vi conf.maldet<\/span><\/p>\n

In this file, edit the following lines to enable various feature and alerts
\nEnable email alert by changing the value to 1 :<\/span>
\n<\/span>email_alert=\u201d1\u201d
\n<\/span>Type your email address :<\/span>
\n<\/span>email_alert=\u201d<\/span>your@domain.com<\/span><\/a>\u2019
\n<\/span><\/p>\n

We will use the ClamAV clamscan binary as default scan engine because it provides a high-performance scan on large file sets. Change value to 1:
\n<\/span>scan_clamscan=\u201d1\u201d
\n<\/span>Next, enable quarantining to move malware to the quarantine automatically during the scan process. Chang value to 1:
\n<\/span>quarantine_hits=\u201d1\u201d
\n<\/span>Change value to 1, to enable clean based malware injections.
\n<\/span>quarantine_clean=\u201d1\u201d<\/span><\/p>\n

Save and exit, you can also change other values based on your requirement.<\/span><\/p>\n

Testing Linux Malware Detect(LMD)<\/b><\/h3>\n

For testing LMD manual scan with the maldet command, you will use the maldet command to scan the web directory \u2018\/var\/www\/html\u2019.
\nDownload some malware file with the help of following commands in web root directory:
\n# cd \/var\/www\/html
\n# wget http:\/\/www.eicar.org\/download\/eicar.com.txt<\/a>
\n# wget http:\/\/www.eicar.org\/download\/eicar_com.zip<\/span><\/p>\n

Next, scan the web root directory with the maldet command:<\/span><\/p>\n

# maldet -a \/var\/www\/html<\/span><\/p>\n

Check the scan report with the following command:<\/span><\/p>\n

# maldet –report 18882——-*<\/span><\/p>\n

Other LMD Command<\/b><\/h3>\n

To ensure Maldet is up-to-date, run the command below:<\/span><\/p>\n

# maldet -u<\/span><\/p>\n


\nYou can see the details of the option available by running the following command:<\/span><\/p>\n

# maldet -h<\/span><\/p>\n


\nPerform a scan for specific file extension only:<\/span><\/p>\n

# maldet -a \/var\/www\/html*.php<\/span><\/p>\n

Get a list of all reports:<\/span><\/p>\n

# maldet -e list<\/span><\/p>\n


\nRestore files from the quarantine directory.<\/span><\/p>\n

# maldet -s SCANID<\/span><\/p>\n

Enable monitoring of a directory.<\/span>
\n<\/span># maldet -m \/var\/www\/html<\/span><\/p>\n

CONCLUSION- <\/b><\/h2>\n

The above configuration will show how to configure Linux Malware Detect in CWP and scan for malware data in your server.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Let’s talk about how to install and configure Linux Malware Detect (LMD) on Centos Web Panel(CWP) 7 with alert? Linux Malware Detect(LMD) is a malware detector and scanner for Linux, designed for shared hosting environments. LMD is released under GNU GPLV2 license, it can be installed on cPanel, WHM and Linux environments with together other…<\/p>\n","protected":false},"author":1,"featured_media":4839,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[90,235,56,62,66],"tags":[253,265,55,65,266,267],"class_list":["post-4836","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-beginner","category-centos","category-cwp-basics","category-how-to","category-technology","tag-commands","tag-configure","tag-cwp","tag-linux","tag-malware","tag-testing"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t