Hi,
We use Nagios XI (Version:5.2.2) and everyday clamscan runs (Antivirus) @ the nagios server which found that the below file as infected.
Please advice , whether we need to exclude the file from clamav scan or we can delete the file.
Note: This file available only at the nagios server.
# cat /var/log/clamav/clamscan.log
Wed Jun 8 04:34:02 GST 2016
File name : /usr/local/nsis/share/nsis/Stubs/bzip2_solid : Win.Adware.Agent-1355074 FOUND
Clamscan found infected file at Nagios server
-
inas.labib
- Posts: 170
- Joined: Tue Sep 11, 2012 3:48 am
Re: Clamscan found infected file at Nagios server
That is used to help build installers for Windows-based monitoring agents. It was probably marked as adware because it can be used to package code up as a distributable format, something malware does a lot. It's perfectly normal to have in XI.
Former Nagios employee
-
inas.labib
- Posts: 170
- Joined: Tue Sep 11, 2012 3:48 am
Re: Clamscan found infected file at Nagios server
Thanks for the update. We will be excluding this file from Antivirus scanning.
Re: Clamscan found infected file at Nagios server
No problem. Mind if we lock this up?
Former Nagios employee
-
inas.labib
- Posts: 170
- Joined: Tue Sep 11, 2012 3:48 am