Scan Your Linux Server for Malware Viruses With ClamAV

Ubuntu Server Malware and Virus Scanning Guide
By velanitsupport / Jul 14, 2026

Using ClamAV to Detect Malware Viruses on Linux

There are many types of malware that affect Ubuntu servers. Botnets, rootkits, and cryptojackers are some among them. Malware may generally cause some strange behavior in the server functioning, or sometimes it may stay hidden.

A complete scanning of Ubuntu may help detect malicious software, allowing you to address security issues quickly.

There is an easy approach to keep your server free of malicious codes. Use ClamAV for this purpose.

What is ClamAV?

ClamAV is a free, open-source antivirus software that helps to check for security threats like malware and viruses on your system. It may also be used as an email scanner and supports a variety of mail types.

ClamAV antivirus software is also useful for detecting threats in compressed files (Zip, 7-Zip) and archives (tar, RAR). It is compatible with different platforms, including Linux distributions such as Ubuntu, Debian, CentOS, and many others.

How to Install ClamAV for Malware Scanning on Ubuntu Server

ClanAV can be installed on Ubuntu server using the following commands:

  • Step1: Open a terminal using

    Press Ctrl + Alt + T

  • Step2: Run the following command to install ClamAV

    sudo apt-get install clamav

    After entering the password and logging in, the installation procedure begins. 

  • Step3: Once it is completed, you need to update virus signatures. For this type

    sudo freshclam

  • Step4: To start scanning for viruses, enter the command

    clamscan OPTIONS File/Folder 

    Tips:  For root permission: sudo clamscan
    For a single file : sudo clamscan Downloads/<filename with extension>
    For all files: sudo clamscan -r /

  • Step5: To scan every file on the Ubuntu server to identify malware, print the names of infected files, and ring a bell upon detecting a threat, input the command

    clamscan -r –remove /home/USER 

    Tips: To view available command line options for ClamAV, you can type clamscan –help

Instead of running security scans manually, you can opt for automated scan configurations. This could help you in checking your system at pre-set times. Tools such as cron or system timers can be used to automate virus scanning.

If you are having troubles with managing it by yourself, you can outsource server maintenance service to Velan Remote IT Support. We have an expert team of Linux server support engineers who deliver continuous monitoring services and security hardening solutions. With 24/7 help desk services, we provide instant support to security events with near-zero disruption.

We are an experienced and also an ISO 9001 and ISO 27001-certified managed service provider who prioritizes security and process quality in all our remote IT support solutions.

Contact us at: [email protected]

Know the answers to queries on ClamAV for Ubuntu Server

What is cron in Linux?

Linux and other Unix based operating systems have an in-built job scheduler utility called cron. 
It is mainly used to automate regular tasks like virus scanning at scheduled times. Every minute, the cron checks for scheduled tasks while operating in the background.

What are the main capabilities of ClamAV?

ClamAV is a virus scanner that uses commands to detect malware in Linux servers. It has an automatic virus definitions updating utility (freshclam) to keep threat definitions up-to-date. The software scans efficiently with the help of its multi-threaded daemon. The AV engine can integrated with other applications with its shared library features (libclamav)

How to find out the status of the ClamAV daemon?

Check the service dashboard widget. The ClamAV daemon mode located under the anti-virus line. If the color shown is green, the service is active. If you want more information, then click on the Active or Inactive in the status column.

Categories

Contact for a Free Consultation