Turn Off ClamAV in cPanel/WHM

What is ClamAV?

ClamAV is a free anti-virus program. It looks through files for harmful code, much like a security scanner at an airport checks bags.

WHM is the admin screen for a cPanel server. Its full name is WebHost Manager. In WHM, ClamAV is added through a plugin called ClamAV Scanner Connector.

Why turn it off?

• ClamAV can use a lot of memory on a small VPS.
• It may slow the server during a scan.
• You may use another security tool.

Warning: with no scanner, harmful files may go unnoticed. Only turn it off if you have another way to check your files.

Steps

1. Log in to WHM. The address is usually your server IP or hostname followed by :2087. Your welcome email has the details.
2. Type Manage Plugins in the search box at the top left, and open it.
3. Find the entry for ClamAV Scanner. The exact name can differ by version.
4. Untick the box for the scanner, or choose the option to uninstall it.
5. Click Save.
6. Wait until the page confirms the change.

Check that it is off

1. Log in to the server over SSH as root.
2. Run:

   ps aux | grep -i clam

   This lists running programs with "clam" in the name. If only the grep line itself shows, ClamAV is not running.

Turn off only for one user

cPanel users may have a Virus Scanner tool. If you only want to stop scanning for one account, ask Hostvento support what options are on your server.

If the menu names on your server look different, use the search box in WHM or open a ticket at https://secure.hostvento.com/submitticket.php.

Quick recap

• ClamAV is a virus scanner that can be added to WHM.
• Open Manage Plugins in WHM and turn off the scanner.
• Check with ps aux | grep -i clam.
• Use another security tool if you turn it off.