Activate deactivate ClamAV by command line.

[elotrohernan 0]

Hi, my name is Hernan, I'm from Argentina. Sorry for my syntax, I will use google translate.

I have a computer with Windows Server 2008r2 and Inmunet 7.0.2.
I have noticed that the sfc.exe process consumes many resources (800mb) when ClamAV detection engine is activated.
I did a clean, test installation and I see that the problem persists.
I read several posts but not a solution.

I wanted to know if there is any command to activate and deactivate clamav as a scheduled task, so in the hours that are used more the server could deactivate the ClamAV engine. Thank you very much.

[ritchie58 442]

Hello Hernan,

I'm sorry to say that Immunet does not support the use of Command Line scripting.

You could, in Settings, just turn off the ClamAV module when your server is at it's most active to reduce system resources being used. Then enable it afterwards. You wouldn't loose all protection as long as you keep the ETHOS & SPERO cloud engines enabled. That is a less than ideal workaround, having to turn on & off the ClamAV module in my opinion though.

The cloud engines should normally remain enabled regardless what other settings you use or don't use.

You do have another option of using just ClamAV's open-sourced scripting code instead of Immunet. ClamAV does use Command Line scripts to configure & use. Here's a link to their home page if you would like to check out the software for yourself. Maybe that might better suit your needs. https://www.clamav.net/

Why your system resources are so high when ClamAV is enabled is troubling. You are using the newest 7.0.2 version right?

Best wishes, Ritchie...

[Frank_ 13]

Yes, i know... old post...
SFC.EXE -s and SFC.exe -k are working to start and stop Immunet Protect. (You can do the same with NET Start/Stop command)
Other commands i've not tested.
https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/213690-amp-for-endpoint-command-line-switches.html