evild3ad / MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
https://lethal-forensics.com
GNU General Public License v3.0
462 stars 53 forks source link

Endless starting ClamAV daemon #11

Closed normaliok closed 2 years ago

normaliok commented 2 years ago

All looks normal until the step "Starting ClamAV Daemon" when I get endless connection attempts to 127.0.0.1 Снимок экрана 2022-07-18 164111

evild3ad commented 2 years ago

You need to install and configure ClamAV manually. Please check README.md for further instructions.

At the end of the MemProcFS-Analyzer.ps1 you find the "Main" where you can enable/disable features. You can disable "ClamAVUpdate" and "ClamAV" if needed and scan "X:\name" e.g. with Microsoft Defender AntiVirus (if you prefer).

Please let me know if you have still any issues.

evild3ad commented 2 years ago

Closed.