Plesk Ubuntu Remove DrWeb!

the MAGIC apt command to remove all of DrWeb:

apt-get remove drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator

root@blue:/home/primax# apt-get remove drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator
Reading package lists… Done
Building dependency tree
Reading state information… Done
The following packages were automatically installed and are no longer required:
Use ‘apt-get autoremove’ to remove them.
The following packages will be REMOVED:
drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator
0 upgraded, 0 newly installed, 6 to remove and 0 not upgraded.
After this operation, 983kB disk space will be freed.
Do you want to continue [Y/n]? y
(Reading database … 356100 files and directories currently installed.)
Removing drweb-base …
Removing psa-drweb-configurator …
Trying to Reconfigure watchdog… Removing drweb-daemon …
Shutting down Dr. Web daemon…
Removing drweb-bases …
Removing drweb-updater …
Removing drweb-common …

After removing DrWeb I’m now getting the following cron job error emailed to me:
/bin/sh: /opt/drweb/ not found

restore QMail prefs with mchk util:

./mchk -without-spam

root@blue:/usr/local/psa/admin/sbin# ./mchk -without-spam

didn’t remove cron job error. but this seemed to deliver all Qmail queu…

found the DrWeb cron job in /var/spool/cron/crontabs

root@blue:/var/spool/cron/crontabs# ls -l
total 52
-rw——- 1 daemon    crontab  230 2010-10-12 16:30 daemon
-rw——- 1 drweb     crontab  224 2010-11-10 01:20 drweb
-rw——- 1 fcc       crontab  198 2009-11-11 22:05 fcc
-rw——- 1 flight    crontab  287 2010-04-30 00:55 flight
-rw——- 1 house     crontab  493 2010-03-30 18:29 house
-rw——- 1 james     crontab  229 2010-08-25 10:57 james
-rw——- 1 kluser    crontab  343 2009-06-04 12:01 kluser
-rw——- 1 mail      crontab  228 2010-10-12 16:30 mail
-rw——- 1 mvc_admin crontab  349 2010-10-20 10:19 mvc_admin
-rw——- 1 patriots  crontab  198 2010-10-04 13:59 patriots
-rw——- 1 qmaild    crontab  230 2010-10-15 12:43 qmaild
-rw——- 1 qmaill    crontab  230 2010-10-15 12:43 qmaill
-rw——- 1 root      crontab 1039 2010-11-10 09:59 root

removed the cron job – i’ll see if this stops the emails. I’m afraid that the QMail cron or something is calling drweb. we’ll see if this works.

root@blue:/home/primax# crontab -r -u drweb

this will remove the cron job for drweb…

finally *might have* figured out how to get rid of the annoying drweb cron emails, “/bin/sh: /opt/drweb/ not found”

solution found here

Log in as root (or you can use sudo) and open /etc/drweb/drweb32.ini:

Look for:
CronSummary = Yes

And change it to:
CronSummary = No

o.k. location of the stoopid DrWeb cron job, /etc/cron.d

root@blue:/etc/cron.d# ls -l
total 36
-rw-r--r-- 1 root root  244 2008-08-01 09:44 anacron
-rw-r--r-- 1 root root  200 2008-12-03 15:13 awstats
-rw-r--r-- 1 root root   40 2009-07-03 02:36 drweb-update
-rw-r--r-- 1 root root  161 2009-10-13 16:41 magicspam-update
-rw-r--r-- 1 root root 1393 2010-11-15 16:14 mailman
-rw-r--r-- 1 root root  580 2008-11-07 12:49 mdadm
-rw-r--r-- 1 root root  492 2008-11-25 17:15 php5
-rw-r--r-- 1 root root 1323 2008-03-31 09:16 postgresql-common
-rw-r--r-- 1 root root   75 2010-11-18 16:37 sbackup

from this site I found you can stop the annoying emails.

but for me, i’m deleting the annoying thing!

rm drweb-update

bye — bye —

5 thoughts on “Plesk Ubuntu Remove DrWeb!”

  1. God bless you for this. 2 weeks battle has finely ended, DrWeb defited and the victory is mine!
    Have you installed some other antivirus on the server to replace the stupid drweb softwear? I’ve got the same server setup, now finking do I even need crap like this…

  2. i’m glad it worked. i have not replaced DrWeb with any other virus solution. I don’t feel the need for this overhead.

Leave a Reply

Your email address will not be published. Required fields are marked *