the MAGIC apt command to remove all of DrWeb:
apt-get remove drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator
root@blue:/home/primax# apt-get remove drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator
Reading package lists… Done
Building dependency tree
Reading state information… Done
The following packages were automatically installed and are no longer required:
xulrunner-1.9-gnome-support
Use ‘apt-get autoremove’ to remove them.
The following packages will be REMOVED:
drweb-base drweb-bases drweb-common drweb-daemon drweb-updater psa-drweb-configurator
0 upgraded, 0 newly installed, 6 to remove and 0 not upgraded.
After this operation, 983kB disk space will be freed.
Do you want to continue [Y/n]? y
(Reading database … 356100 files and directories currently installed.)
Removing drweb-base …
Removing psa-drweb-configurator …
Trying to Reconfigure watchdog… Removing drweb-daemon …
Shutting down Dr. Web daemon…
Removing drweb-bases …
Removing drweb-updater …
Removing drweb-common …
root@blue:/home/primax#
After removing DrWeb I’m now getting the following cron job error emailed to me:
/bin/sh: /opt/drweb/update.pl: not found
restore QMail prefs with mchk util:
./mchk -without-spam
root@blue:/usr/local/psa/admin/sbin# ./mchk -without-spam
didn’t remove cron job error. but this seemed to deliver all Qmail queu…
found the DrWeb cron job in /var/spool/cron/crontabs
root@blue:/var/spool/cron/crontabs# ls -l
total 52
-rw——- 1 daemon crontab 230 2010-10-12 16:30 daemon
-rw——- 1 drweb crontab 224 2010-11-10 01:20 drweb
-rw——- 1 fcc crontab 198 2009-11-11 22:05 fcc
-rw——- 1 flight crontab 287 2010-04-30 00:55 flight
-rw——- 1 house crontab 493 2010-03-30 18:29 house
-rw——- 1 james crontab 229 2010-08-25 10:57 james
-rw——- 1 kluser crontab 343 2009-06-04 12:01 kluser
-rw——- 1 mail crontab 228 2010-10-12 16:30 mail
-rw——- 1 mvc_admin crontab 349 2010-10-20 10:19 mvc_admin
-rw——- 1 patriots crontab 198 2010-10-04 13:59 patriots
-rw——- 1 qmaild crontab 230 2010-10-15 12:43 qmaild
-rw——- 1 qmaill crontab 230 2010-10-15 12:43 qmaill
-rw——- 1 root crontab 1039 2010-11-10 09:59 root
removed the cron job – i’ll see if this stops the emails. I’m afraid that the QMail cron or something is calling drweb. we’ll see if this works.
root@blue:/home/primax# crontab -r -u drweb
this will remove the cron job for drweb…
finally *might have* figured out how to get rid of the annoying drweb cron emails, “/bin/sh: /opt/drweb/update.pl: not found”
Log in as root (or you can use sudo) and open /etc/drweb/drweb32.ini:
Look for:
CronSummary = Yes
And change it to:
CronSummary = No
o.k. location of the stoopid DrWeb cron job, /etc/cron.d
root@blue:/etc/cron.d# ls -l total 36 -rw-r--r-- 1 root root 244 2008-08-01 09:44 anacron -rw-r--r-- 1 root root 200 2008-12-03 15:13 awstats -rw-r--r-- 1 root root 40 2009-07-03 02:36 drweb-update -rw-r--r-- 1 root root 161 2009-10-13 16:41 magicspam-update -rw-r--r-- 1 root root 1393 2010-11-15 16:14 mailman -rw-r--r-- 1 root root 580 2008-11-07 12:49 mdadm -rw-r--r-- 1 root root 492 2008-11-25 17:15 php5 -rw-r--r-- 1 root root 1323 2008-03-31 09:16 postgresql-common -rw-r--r-- 1 root root 75 2010-11-18 16:37 sbackup root@blue:/etc/cron.d#
from this site I found you can stop the annoying emails.
but for me, i’m deleting the annoying thing!
rm drweb-update
bye — bye –
wao
worked like a charm..
cheerz
[Translate]
God bless you for this. 2 weeks battle has finely ended, DrWeb defited and the victory is mine!
Have you installed some other antivirus on the server to replace the stupid drweb softwear? I’ve got the same server setup, now finking do I even need crap like this…
[Translate]
i’m glad it worked. i have not replaced DrWeb with any other virus solution. I don’t feel the need for this overhead.
[Translate]