DICKY IBROHIM
Jasa Pembuatan Website SEO Expert

Cara install maldetect di Debian 10

Cara install Linux Malware Detect (LMD) atau Maldetect di Debian 10

Cara install Linux Malware Detect (LMD) atau Maldetect di Debian 10 secara urut pada Google Cloud atau VPS lainnya. Mari langsung saja

Cara install Linux Malware Detect (LMD) atau Maldetect di Debian 10 (VPS)

Masuk sebagai root untuk akses penuh

su

kemudian ketikan password root VPS anda

Masuk ke folder temporary

cd /tmp

kemudian download maldetect (LMD) terbaru dengan cara mengetikan perintah:

wget http://www.rfxn.com/downloads/maldetect-current.tar.gz

ekstrak hasil download dengan mengetikan:

tar -xvf maldetect-current.tar.gz

Akan tampil kurang lebih proses seperti ini:

maldetect-1.6.4/files/clean/js.inject.VisitorTracker
maldetect-1.6.4/files/clean/gzbase64.inject.unclassed
maldetect-1.6.4/files/ignore_sigs
maldetect-1.6.4/files/conf.maldet
maldetect-1.6.4/files/ignore_inotify
maldetect-1.6.4/files/sigs/
maldetect-1.6.4/files/sigs/hex.dat
maldetect-1.6.4/files/sigs/rfxn.yara
maldetect-1.6.4/files/sigs/rfxn.ndb
maldetect-1.6.4/files/sigs/rfxn.hdb
maldetect-1.6.4/files/sigs/md5v2.dat
maldetect-1.6.4/files/sigs/maldet.sigs.ver
maldetect-1.6.4/files/sigs/md5.dat
maldetect-1.6.4/files/sigs/rfxn.yara.bk
maldetect-1.6.4/files/sigs/appver/
maldetect-1.6.4/files/sigs/appver/wordpress.ver
maldetect-1.6.4/files/monitor_paths
maldetect-1.6.4/CHANGELOG
maldetect-1.6.4/CHANGELOG.VARIABLES
maldetect-1.6.4/COPYING.GPL
maldetect-1.6.4/CHANGELOG.RELEASE
maldetect-1.6.4/cron.d.pub
maldetect-1.6.4/.ca.def
maldetect-1.6.4/install.sh

hapus file tar.gz hasil download yang sudah di ekstrak agar mengurangi space yang digunakan. Ketikan perintah:

rm maldetect-current.tar.gz

masuk ke folder maldetect. Untuk versi disesuaikan versi saat ini ya:

cd maldetect-1.6.4

ketikan perintah ini untuk menginstal:

bash ./install.sh

Maka anda akan melihat proses seperti ini:

installation completed to /usr/local/maldetect

config file: /usr/local/maldetect/conf.maldet

exec file: /usr/local/maldetect/maldet

exec link: /usr/local/sbin/maldet

exec link: /usr/local/sbin/lmd

cron.daily: /etc/cron.daily/maldet

imported config options from /usr/local/maldetect.last/conf.maldet

maldet(13793): {sigup} performing signature update check...maldet(13793): {sigup} local signature set is version 201907043616

maldet(13793): {sigup} new signature set 2019081323971 available

maldet(13793): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgzmaldet(13793): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz

maldet(13793): {sigup} verified md5sum of maldet-sigpack.tgz

maldet(13793): {sigup} unpacked and installed maldet-sigpack.tgz

maldet(13793): {sigup} verified md5sum of maldet-clean.tgz

maldet(13793): {sigup} unpacked and installed maldet-clean.tgz

maldet(13793): {sigup} signature set update completed

maldet(13793): {sigup} 15550 signatures (12738 MD5 | 2035 HEX | 777 YARA | 0 USER)

Lalu edit file conf.maldet

nano /usr/local/maldetect/conf.maldet

Atur nilainya seperti berikut:

scan_clamscan="1"
email_alert="1"
email_addr="[email protected]"
quarantine_hits="1"
quarantine_clean="1"
quarantine_suspend_user="0"
quarantine_suspend_user_minuid="1000"

Masuk ke folder /usr/local/maldetect

cd /usr/local/maldetect

Buat alias maldet

alias maldet=/usr/local/sbin/maldet

ketikan su – untuk masuk ke root . Path root mencakup /usr/local/sbin pada banyak distribusi Linux termasuk debian.

su -

Download inotify-tools. Cara menginstall inotify di linux lain silahkan klik: github.com/rvoicilas/inotify-tools/wiki

apt-get install inotify-tools

Anda akan melihat proses:

Reading package lists... Done

Building dependency tree Reading state information... DoneThe following additional packages will be installed: libinotifytools0

The following NEW packages will be installed: inotify-tools libinotifytools

00 upgraded, 2 newly installed, 0 to remove and 5 not upgraded.Need to get 44.3 kB of archives.

After this operation, 145 kB of additional disk space will be used.Do you want to continue? [Y/n] y

Get:1 http://deb.debian.org/debian buster/main amd64 libinotifytools0 amd64 3.14-7 [18.7 kB]

Get:2 http://deb.debian.org/debian buster/main amd64 inotify-tools amd64 3.14-7 [25.5 kB]

Fetched 44.3 kB in 0s (2711 kB/s) Selecting previously unselected package libinotifytools0:amd64.(Reading database ... 43801 files and directories currently installed.)

Preparing to unpack .../libinotifytools0_3.14-7_amd64.deb ...Unpacking libinotifytools0:amd64 (3.14-7) ...Selecting previously unselected package inotify-tools.

Preparing to unpack .../inotify-tools_3.14-7_amd64.deb ...Unpacking inotify-tools (3.14-7) ...Setting up libinotifytools0:amd64 (3.14-7) ...Setting up inotify-tools (3.14-7) ...Processing triggers for libc-bin (2.28-10) ...

Cara menggunakan maldet

Cara scan folder tertentu

maldet -a /path_yang_akan_anda_scan/

Tunggu proses

Untuk Scan di background yang sangat ideal untuk scan berukuran besar (memakan waktu lama) kita bisa gunakan maldet -b

maldet -b -r /path_yang_akan_anda_scan/

Update maldetect ke versi terkini:

maldet -d

terminate inotify monitoring service kita gunakan -k, –kill

maldet -k

Karantina semua hasil SCANID

maldet –quarantine 081419-1234.2311159

Lihat laporan hasil scan terbaru dan kirim email

maldet –report SCANID [email protected]

Lihat laporan hasil scan terbaru

maldet –report 081419-1234.2311159

Restore hasil scan

maldet –restore 081419-1234.2311159

Melihat log

maldet -l

Hapus log

maldet -p

Menutup notify

killall inotifywait

 

Sekian panduan cara install Linux Malware Detect (LMD) atau Maldetect di Debian 10 secara urut pada Google Cloud atau VPS lainnya. Mari langsung saja

Leave A Reply

Your email address will not be published.