clamscan vs clamdscan

[Alexey Azariev]

Hi!

 Trying to configure ClamAV for use with Resourcespace ( https://www.resourcespace.com/knowledge-base/plugins/antivirus ).

It works fine with clamscan, except of long time need for clamscan to load signatures on every scan, something what makes uploads to work very slow. An alternative could be to use clamdscan , it uses clamd which has signatures pre-loaded. But when i try to point Resourcespace to use clamdscan in config.php, it's starts to quarantine all uploads, not only those which are infected ( testing with standart Eicar ) any ideas for correct options in config.php?

Tried with:

$antivirus_path = '/usr/bin/clamdscan';
$antivirus_silent_options = '--quiet';

but then it just lets everything to pass trough, even when i can see this in clamav.log on upload:

Tue Jun  4 13:52:49 2024 -> /xxx/filestore/1/1/1_38ab5f9e5d41f3b/111_fe92d641d097f98.txt: Eicar-Signature(69630e4574ec6798239b091cda43dca0:69) FOUND

Any ideas?

Thanks in advance

Alexei