Installing ClamWall for use with Mercury/32 and ClamAV.

ClamAV as a free, open source virus scanner. It has a commandline interface, an automatic updater, and has frequent and rapidly updated virus signature library. The ClamAV home page is located at http://clamav.net.

ClamWall is a daemon for Mercury/32 that integrates ClamAV virus scanning into the Mercury/32 core process. ClamWall was created by Lukas Gebauer. The ClamWall home page is located at http://www.ararat.cz/eng/show.php?clamwall.

This guide assumes that Mercury/32 is installed in the default location (C:\Mercury) and functioning properly.

We will use what is known as ClamSelf mode. In this mode, ClamWall will start and stop the ClamD scanning engine and the Freshclam update engine when needed, and close them when Mecury/32 is closed. Freshclam will check for updates to the virus signature database every two hours.

To install ClamWall, perform the following procedure:

  1. Shut down Mercury/32.
  2. Download the latest version of ClamWall and the prepackaged ClamAV binaries from the ClamWall web site: http://www.ararat.cz/eng/show.php?clamwall
  3. Run the ClamWall installation program. The only available option is to select the Mercury program directory. If you installed Mercury/32 in the default location, then the default ClamWall options are suitable.
  4. Edit the file C:\MERCURY\ClamWall.ini, and change the the following lines to the values shown
      LogFile=C:\MERCURY\Logs\CW~M~Y.log
  Debug=1
  ReportSender=0
  ClearPostPart=0
  ClearPrePart=0
  UUKill=0
  SaveDir=C:\MERCURY\Virus\

  ClamSelf=1
  ClamHide=1
  ClamDir=C:\MERCURY\ClamAV

    Place a semicolon in front of the "BanExtension=" line. This will prevent ClamWall from automatically refusing to deliver messages that continue files of these types. Do not change any other lines. If necessary, create the directories C:\MERCURY\Logs and C:\MERCURY\Virus.

  5. Create the C:\MERCURY\ClamAV directory. Extract the contents of the prepackaged ClamAV binaries to this directory.
  6. Start Mercury/32.
  7. Go to http://www.eicar.com and download a copy of the EICAR anti-virus test file. Attach it to an e-mail and send it through Mercury/32. ClamAV should detect it as a virus and save it to the C:\MERCURY\Virus directory.
One page links to ClamWall:
 . Page Name .   . Last Modified . 
 Mercury32   June 28, 2006 8:39 am