How to install Linux Maldet Anti Sheller

This guide will walk you through installing LMD (Linux Malware Detect) on your VPS/Dedicated server

You will need to be logged in as root to the server over SSH.

Let's create a temporary directory and navigate into it, followed by downloading the latest release of maldet:

mkdir tmp
cd tmp
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz

Extract the archive containing LMD and navigate into the directory it creates:

tar xf maldetect-current.tar.gz && cd maldetect-*

Warning: Version may vary, you can check the current directory listing with the command `ls`

Once you're inside execute the install script:

./install.sh

This will automatically install a cronjob inside /etc/cron.daily/maldet as well, it will make LMD execute daily and scan local cPanel accounts for possible malware.

Usage is fairly simple, to scan user's home directory or any other directory you would simply execute:

maldet -a /home/user

Any path is alright.

Please note that LMD runs great with ClamAV.you can lear how to install it here in this artice.

Setting up e-mail alerts

LMD has an option to alert you each time it detects malware, please review these configuration variables inside /usr/local/maldetect/conf.maldet

variable value description
email_alert 1 or 0 enable or disable e-mail alerts
email_addr  e-mail address  target e-mail for notifications, should be put in quotes like: "[email protected]"

Other configuration variables that you should look into:

variable value description
quar_hits number if the number is different than 0, enables automatic quarantine
maxfilesize  size  makes LMD skip files larger than set size, for example "512k" (512 KB)

Additional information

You can read the readme file online, which describes the application, here:http://www.rfxn.com/appdocs/README.maldetect

Was this answer helpful?

 Print this Article

Also Read

Prevent DDoS by using mod_evasive

“mod_evasive” is an evasive maneuvers module for Apache to provide evasive action in...

Disable shell access for unknown users

Suspect there are other users in your system that have shell access to your system? Please follow...

Installing Rkhunter (Rootkit Hunter) in RHEL, CentOS and Fedora

Rkhunter (Rootkit Hunter) is an open source Unix/Linux based scanner tool for Linux systems...

How To Use The IP Deny Manager

This tutorial will teach you how to use the IP Deny Manager to block access to your web site from...

Installing and configuring Spamassassin on CentOS

If you run your own mail server you'll want it to run spam filtering software to reduce the...