How to Scan & Stop Uploading Infected Files to Your Server

[JmZ]

Probably works but non-c99 shells wont be detected, so say hello to script kiddies.

JmZ Reviewed by JmZ on 25th Jun 2009. How to Scan & Stop Uploading Infected Files to Your Server To scan and stop uploading infected files to your server , you need to enable ClamAV with PureFTP (Do not use this with ProFTP or other FTP services on your server). 1. Make sure Clamav is installed on your server and/or up-to-date. Clamav binary files are installed in (for a cPanel and DirectAdmin powered server) /usr/local/bin and /usr/bin/ Using your favorite Linux text editor such as vi or pico, edit /etc/pure-ftpd.conf file and set the entry: From: Rating: 5

[wildfire95]

Could you have a PHP script which did this -

Looked at the PHP file, and if it contained keywords which are in shells e.g. -

C99
C100
Hacking
Shell

It would not upload it, if it didnt have any of the keywords, it would upload it.

[Storming]

I would also like to know this