Clamscan found infected file at Nagios server

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
inas.labib
Posts: 170
Joined: Tue Sep 11, 2012 3:48 am

Clamscan found infected file at Nagios server

Post by inas.labib »

Hi,

We use Nagios XI (Version:5.2.2) and everyday clamscan runs (Antivirus) @ the nagios server which found that the below file as infected.
Please advice , whether we need to exclude the file from clamav scan or we can delete the file.

Note: This file available only at the nagios server.

# cat /var/log/clamav/clamscan.log
Wed Jun 8 04:34:02 GST 2016
File name : /usr/local/nsis/share/nsis/Stubs/bzip2_solid : Win.Adware.Agent-1355074 FOUND
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Clamscan found infected file at Nagios server

Post by tmcdonald »

That is used to help build installers for Windows-based monitoring agents. It was probably marked as adware because it can be used to package code up as a distributable format, something malware does a lot. It's perfectly normal to have in XI.
Former Nagios employee
inas.labib
Posts: 170
Joined: Tue Sep 11, 2012 3:48 am

Re: Clamscan found infected file at Nagios server

Post by inas.labib »

Thanks for the update. We will be excluding this file from Antivirus scanning.
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Clamscan found infected file at Nagios server

Post by tmcdonald »

No problem. Mind if we lock this up?
Former Nagios employee
inas.labib
Posts: 170
Joined: Tue Sep 11, 2012 3:48 am

Re: Clamscan found infected file at Nagios server

Post by inas.labib »

Yes please
Locked