Thread: Clamav

Do any of you use clamav to scan your web hosting accounts? If not, what other software do you use?

My host, TotalChoiceHosting, runs a malware scanner on all it's servers anyway. In fact I've had arguments with them before now because their scanner has detected something in WordPress cache or a file uploaded by one of my scripts as dangerous even though they could not be run. Ended up with my threatening to leave and them excluding some of my directories from the scan.

ClamAV works, but it still only catches the most common and known threats. What we do is run some custom and other security services to find and catch attacks that are less known. We go more IDS looking for changes.