Automated GUI program using ClamWin as a Memory ScannerSubmitted by BluePlanet on February 20, 2008 - 7:11pm
FYI: This an continuation from http://portableapps.com/node/5449#comment-66537 A bunch of people here came up with the great idea of using a .bat file to run a ClamWin memory scan every time that you plugged in your drive. But I don't like the ugly DOS prompt. :P :D So I wrote a nice little program, that will start a scan, but only show a blinking tray icon. If ClamWin finds anything, a window will pop up and tell you what it found. You then can save the report off as a file. And yes it has a GUI to set the settings. It will pop up the first time you run the program, and you can reset the settings with the tray icon menu, or delete the .ini file. If you delete the .ini, the prefs GUI pops up again next time you run. New for Version 2.2! 1) Detects and launches ClamWin Portable Database Updater if in same folder Here are some screenshots. MsgBox at Start http://www.divshare.com/img/3829513-1e5.png Normal Tray Icon http://www.divshare.com/img/3829514-a89.png Prefs GUI http://www.divshare.com/img/3907831-9d3.png AutoLaunch GUI http://www.divshare.com/img/3907828-9f7.png Tray Icon Clean http://www.divshare.com/img/3829516-ccc.png Tray Options http://www.divshare.com/img/3842491-d61.png Found Virus Tray http://www.divshare.com/img/3829519-4fb.png Found Virus GUI http://www.divshare.com/img/3907832-cc1.png And here is the .zip file containing the program and the source. If anyone finds a bug in the program, just tell me and I'll try to fix them. Version 2.2 http://www.divshare.com/download/3907829-e28 <---- Version 2.2 currently has bugs. I'll try to fix them and re-upload. :( Much Thanks to NeoRame for the new program icon! :) Hope you find this useful! BluePlanet ( categories: )
|
Things I'm going to add!
1) Going to add a Virus Database Updater
2) Option to AutoLaunch multiple apps ADDED
3) Option to scan whole computer with ClamWin if a Virus is found in memory. ADDED (On virus found GUI)
4) Option to unload infected modules in memory ADDED
5) Computer signature recognition (Prevents scanning the same computer more than one a day, unless you tell it to) Didn't like, not added
6) Other little tweaks and stuff... (Give me Ideas for stuff to add/fix! :D)
BTW: Is anyone interested in a F@H Portable app?
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Sweet!
This sounds great, I'll try it out.
It's kinda sad when my desktop is messier than my room.
Password Protected
The Zip seems password protected, is this an accident?
It's kinda sad when my desktop is messier than my room.
??? Shouldn't Be
It's not password protected... Don't know what is going wrong for you. Is it the download, or the actual .zip file?
I don't have any trouble opening it. :?
OOPS!!! It Is! I'll Fix it and change the link! Sorry!
FIXED!!! :)
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Sweet
It's working good so far. On a local drive, that is. I don't know whether or not the program can handle it, but here's a nicer ClamWin logo.
It's kinda sad when my desktop is messier than my room.
good job, works fine. thanks
good job, works fine. thanks for that
regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
Nice, I might very well add
Nice, I might very well add this to the standard apps I'll launch before I launch the PA menu.
One suggestion though, You might want to just ask for a memory scan without references to USB portable drive... Just keep it a bit more generic :)
this is a must have
thank you very much... :)
If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report :D
Thats Your way of being lazy? Great!
Very promising, found no problem with 2.1 till now.Keep on being lazy :D
EDIT: tested it on my office PC(restricted account,domain user)
some issues:
When I set the autorun path to AutoMemScan.exe, plugin anew, there´s a popup " access denied to drive X" (=portable drive), other apps like convey work with autorun.inf
Second:When I deny a memoryscan: app closes and doesn´t ask for launching the next app
EDIt: @ my first EDIT comment:this is very strange ... when using the normal long path neither Your app nor ClamwinPortable starts. The windows autorun pop appears, I choose "run the portable app" , then a pop up says Drive x : access denied ( as stated above), but when I use the shortpath like Open=PortableApps\AUTOME~1\AUTOME~1.EXE it works like charm?
Any ideas ? issue with handling the paths in clamwin?
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
Same Problem
I am having this same problem. Whenever I try to run the program from the autorun menu it says access denied. Is this because I do not have the program in the root of the drive? I've tried both the short and long path method in the inf file, but no luck. Is there something I'm doing wrong? Here is my inf file.
[autorun]
OPEN=Programs\Installed Programs\Security\Autorun ClamWin\AutoMemScan 2.2.exe
ICON=Programs\Installed Programs\Security\Autorun ClamWin\AutoMemScan 2.2.exe
ACTION = Scan Memory
Thanks
just use the original autorun.inf...
put automemscan into thePortableappsFolder and edit autorun.inf with notepad like that:
[Autorun]
Open=PortableApps\AUTOME~1\AUTOME~1.EXE
Action=Start PortableApps.com (or a Name of Your choice)
Icon=..\..\..\xy.ico (=your icon path)
Label=xy (=your label)
Then Your Memscan will be found: shortpath overrides a possible typing error within the .exe name
EDIT: For Your purpose
[autorun]
OPEN=Programs\Installed Programs\Security\AUTOME~1\AUTOME~1.EXE
ICON=Programs\Installed Programs\Security\AUTOME~1\AUTOME~1.EXE
ACTION =Start Scan Memory
Label=MyDrivexy
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
I had the same problem
and I think I solved it be removing the spaces in the autorun.inf and the Appname.
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
Exactly
That is exactly what I figured out as well, although you beat me to the punch. You have to remove all the spaces in the paths. Otherwise you get the error message. I've also discovered that underscores are invalid also. I think the writer of this program should remove the spaces from the file name in order to make it easier for an ordinary user to create the inf file. This could also be part of the GUI in a future version.
Another idea I though of for a future version is to display results if an infected file/process is found. And then to have the option to kill that process on a file by file basis. In other words, if 5 viruses are found you have the option to kill each individual process associated with the virus. I don't know if this is feasible, but it would not automatically kill processes that are essential to the running of the computer.
I have found a virus running this program, so I don't know exactly what happens if one is found, maybe this could be incorporated into a future version.
text fixes
(Using < code > so lines aren't as long (no wrapping))
Fix line 133
Gui, Add, Text, x16 y10 w390 h50 , A virus was detected running in the system's memory. Your portable drive may be infected! A full scan of your portable drive and system is recommended.Make line 130 and 133 consistent. Use either "in system memory" or "in your system's memory" not "in systems memory". Check line 88 too (drop "the"). Line 59 too. Check line 29...you use "system memory" everywhere except this line where you say "this computer's memory". Pick one and stick with it
Virus should be lowercase in the middle of sentences.
Fix spelling/capitalization on line 175
msgbox,,About AutoMemScan Version 2.1, AutoMemScan is a small automated GUI frontend for the ClamAV virus scanning engine.`nIt is designed to work with the www.PortableApps.com ClamWin Portable package.`n`nNeither AutoMemScan or ClamAV is responsible for any loss of data`nor other damages caused by malware (detected and undetected) and program`nmalfunctions to your computer.`n`nVirus scanners may not be able to detect all known viruses.`nIt is recommended that you take additional security precautions when`nusing a portable drive on an unknown computer.`n`nCreated by: BluePlanet Studios 2008
Is the program named "Auto Memory Scan" or "AutoMemoryScan"? Both are used thoughout the program. Pick one and stick with it.
The PortableApps logo is now trademarked. You need to get John Haller's permission to use it for the program icon.
Executable has a space between the one and the file extension. Change "AutoMemScan 2.1 .exe" to "AutoMemScan 2.1.exe". Same goes for the .ahk source file.
Cancer Survivors -- Remember the fight, celebrate the victory!
Help control the rugrat population -- have yourself spayed or neutered!
Picky Picky Picky
I'm a Mechanical Engineer and programing is a hobby. I'm not a English or a grammar teacher, you cant expect me to be perfect. :P Hovever since you pointed them out, I'll fix them. I guess I'll make a new icon too while I'm at it.
The reason It dosent launch your apps when you hit "no" on the scan message box is because that causes the program to quit. I'll change the way it launches the programs in the next version so that it will still launch them. I've also added a new options GUI so you can autolaunch multiple apps. (as many as you want!)
I'll see if I get the new version done today, else I'll post it tomorow.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
No need to apologize neither to bother...
he´s offered You some help. So calm down. And ok, my little statement on the way Your app launches others wasn´t a question , merely a request.. :D
Be sure that when everything will be done there will be a final request for a .paf version with installer ;)
On behalf of the icon issue, perhaps NeoRame could assist in making a new one.Won´t You, NeoR..? ;)
For my humble part :? , I could offer You a German translation of the GUI, at least when it´s final. I´ll post the strings here when it´s done..:) Good work!
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
icon? no problem i can do
icon? no problem i can do it, which kind of logo is your wish??? can i insert the original CalmWin logo? i can also create a completely new one too..
regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
I don't get
how you people are so amazing at this icon making and theme making...
Somebody give me a portable video editor... Please!
If ya wanna see my email, go to digitxpsemail.tk (at least for now!)
My dad saved over $850 a month, by switching to Geico! :P
me neither
but I'm glad we have them here :)
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
me too
:)
uh!
BTW, I can help translating into Spanish too, if you like to have the App multilang...
If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report :D
Here a logo idea from me....
Here a logo idea from me.... hope you like it!!!
NeoRame´s AutoMemScan Logo!
regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
AWESOME!
That's sweet, very clever ClamWin logo and Magnifying glass integration.
*gives NeoRame three cookies*
It's kinda sad when my desktop is messier than my room.
yummie yummie, Polly loves
yummie yummie, Polly loves cookies... oh sorry another game ;-)
thanks, glad to here that you like.
greetz
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
Wow! Nice Icon!
Looks great! I didn't see your post till this morning, and so made another icon last night too. But I like yours better! :) I give you a whole box of cookies!
Here is an image of mine next to yours.
http://www.divshare.com/img/3851046-dda.png
I'm almost done with Version 2.2 :D I'll get it uploaded sometime today!
EDIT: I'm going to wait till Monday to release 2.2, then I might be able to put in a few more things before I post it.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
feedback
As wk said, code feedback is just help/suggestions so you can take it or leave it (it's up to you). Patrick and I are consistently picky. ;)
Cancer Survivors -- Remember the fight, celebrate the victory!
Help control the rugrat population -- have yourself spayed or neutered!
Yep
We sure are.
*smiles*
It's kinda sad when my desktop is messier than my room.
Sorry, Didn't mean to come across as grumpy.
For some reason the forum left out most of my smilies in that post. Without them it seems that I was grouchy and complaining. :D I don't mind having all of the little grammar bugs pointed out. :) Perhaps it will get me to brush up on my spelling. (I doubt it though :P )
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Love the sig- I think that
Love the sig-
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Good gracious! There goes a kangaroo. I must have a practice with me boomerang- Now then, slowly back
If you throw that thing at me, I'll jump right on your head.
Innit marvellous? Got a land full of kangaroos and I had to pick that one.
I like your sig. too
"Good gracious! There goes a kangaroo. I must have a practice with me boomerang- Now then, slowly back
If you throw that thing at me, I'll jump right on your head.
Innit marvellous? Got a land full of kangaroos and I had to pick that one."
I remember hearing that song a while back. "My boomerang won't come back!" :P Been a long time. :D
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
My dad told my about it. I
My dad told my about it. I found it on youtube.
Good gracious! There goes a kangaroo. I must have a practice with me boomerang- Now then, slowly back
If you throw that thing at me, I'll jump right on your head.
Innit marvellous? Got a land full of kangaroos and I had to pick that one.
do you know
this version. Cute.
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
I love the idea
I'd love it if John can put it under Safe Portable apping. This is convenient as well as safe! :)
Somebody give me a portable video editor... Please!
If ya wanna see my email, go to digitxpsemail.tk (at least for now!)
My dad saved over $850 a month, by switching to Geico! :P
and lazy
hehehe
I love lazy stuff... ;)
If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report :D
Lazy is good...
"I love lazy stuff..." Me too! :P :D
FYI: New version of WebAutoStart is out. It has a nice GUI for adding apps so you don't have to mess with the .ini file ;)
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
webAutostart doesn´t work on my PC, so..
I´ll expect Your next AutoMemScan.exe.. :)
Edit:@NeoRame: nice icon, may I suggest another one with the biohazard sign integrated.. ;)
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
Can I Give You Hosting?
E-mail me at:
My user name no spaces or caps
AT
nascent-project.org
If you're interested.
It's kinda sad when my desktop is messier than my room.
2.2 where are you.... *look
2.2 where are you.... *look around*
Hell was full, so I came back!!!
Sorry for my lousy English!!!
Sorry... Haven't had the time.
I haven't had the time to work on 2.2 this weekend. Everything kinda went into overdrive at work and at home. I'll post it as soon as I can. :(
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Wow!
Things have come a long way since I last checked here! Nice Work BluePanet! I Like it!
You should use a blue planet like circle with a line thru it (Like Saturn) as an avatar. I saw a nice one on a penguin recently, looks good.
Have an Awesome Day!
You mean the one at pclinuxos.com?
Yes I've seen that avatar for BluePlanet over at pclinuxos.com. Him and me have talked before. He does a lot of animation and computer graphics. Perhaps I'll ask him if he doesn't mind me borrowing one of his avatars.
BTW: AutoMemScan Version 2.2 is out! :D
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Ok i found few bugs:
Ok i found few bugs:
1. on my first start where i pressed the edit auto launch button the program chrashed.
2. on my next try´s when ipressed the auto launch button my system and the app slows down
3. i can only edit the settings when the app scan the memory. if the scan complete all windows of AMS2.2 closed
and now my questions:
where are the option to set as default that the app scan the whole computer with ClamWin if a Virus is found in memory?
and wher e ican find the option for Virus Database Updater?
regards
NeoRame
can you add a localize option for more languages???
Hell was full, so I came back!!!
Sorry for my lousy English!!!
freshclam.conf
Not sure if this was addressed in version 2.2, but for some clarification, does version 2.2 already have a freshclam.conf file for updating the virus defenition database? If not you need to create one as described here:
http://portableapps.com/node/5449#comment-35278
and ensure it is in the proper freshclam directory, I believe it's PortableApps\ClamWinPortable\App\clamwin\bin\freshclam.conf.
Or it could be the executable filename, there's a space in it.
That might explain the crash on launch. Sorry if I've only added to the confusion.
Have an Awesome Day!
i have found my mistake, i
i have found my mistake,
i use WindowsBlinds after disable the skining option for AMS the app work perfectly (for me).
thanks for this work and regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
Seems to work great for me....
just one question. The clamwin updater thing.. what does it mean "detects the clamwin updater if it is in the same folder" which folder Automemscan2_2 or portableapps/clamwin ?
EDIT: the ability to change locale.. good idea, as I stated above, I could do a German translation .
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
No, AMS dosen't update definitions by itself... yet
If you put it in the same folder as ClamWinPortableDBUpdate.exe found at http://www.clamup.co.nr/ (It's been discussed in this forum before) It will launch that program and update the database. I have been planning to add in my own updater for a while now, just haven't gotten around to it.
Also the "option to scan the whole computer" is on a button of the virus found GUI, not in the options screen. And all it does is launch ClamWinPortable. I found that for the whole computer the actual ClamWin does better than my app. I could however add that option back in though, if enough people asked for it. Sorry about the confusion on that. :(
I found and need to fix the bug on the options screen, where AMS crashes when it finishes scanning while the GUI is open. :( However I cant get it to crash or slow down on the AutoLaunch option.
Going to add a settings button on the first message box, to allow for changing the settings without scanning.
I'm going to wait to attempt to add multi-language support until after I get the program final.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
thanks, that´s it...
put the updater files into the AutoMemScan folder and it works :)
It´s really amazing, for now my favourite app on the list of musthave portable apps!
Good work :) :)
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
Yep, it works!
Works well with dbupdate, just like you said.
For what it's worth, I did rename the file, and I'm still starting it from a .bat file, just becuase that's what I prefer. Here's the contents of my relevant files:
Autorun.inf:
[Autorun]
UseAutoPlay=1
Icon=PortableApps\PortableAppsMenu\PortableAppsMenu.exe
Label=PortableApps
shellexecute=AutoRun.bat
Autorun.bat:
@echo off
cd\
start \PortableApps\ClamWinPortableDBUpdate\AutoMemScan2_2.exe
exit
Works like a charm! Thanks!
Have an Awesome Day!
Glad to hear you like it!
For the next version I'm going to add in it's own database updater, but I'll still leave the option to use the ClamWinPortableBDUpdate.exe because it is probably nicer than anything I can make. :) I originally thought of putting the entire program into mine, it's written in the same language as my program, and under the GPL. But I don't like using other peoples work. (I feel like I'm stealing when I use someones code, even when I give them credit for it)
If you have any more suggestions of features to add please tell me, and I'll see if I can add them in. Otherwise I think after I get rid of the bugs in this version,and add the stuff that I've already mentioned, I'll make a final version and start working on a multi-language option.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Http proxy support
I would add http proxy support if you can. I need to use a proxy gateway at work to update. This is a problem I have with the DBUpdate program.
I can try...
I'll see what I can do... Never tried programming using a proxy to connect to the web.
EDIT: I think I'll be able to add proxy support through cURL or libcURL. :) It will be just a matter if I can figure out the correct command lines to send to it. http://curl.haxx.se/ cURL is open source
If I am able to use cURL you will be able to enter a proxy and port, and optionally a password and username if your proxy requires one.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
very nice...
that would fit my needs perfectly
you are doing some good work here...keep it up
yes..oh yes
I am in the same boat as wraithdu...need that proxy support
BluePlanet can you please
BluePlanet can you please take a look here???
http://portableapps.com/node/11735
regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!
looked at it...
See my comment there. I don't program in nsis, but I could create a program for you.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
Say
what programming language do you program in ?
Somebody give me a portable video editor... Please!
If ya wanna see my email, go to digitxpsemail.tk (at least for now!)
My dad saved over $850 a month, by switching to Geico! :P
A few different ones...
I mainly use java when I program, but for my little programs I've been posting here I've been using AutoHotKey. It's a derivative of AutoIt but has more options and features (IMHO). Takes less time than java, is easier, and doesn't need java to be installed on the machine it is run on. Never have really liked using nsis, so I don't have much experience with it. I can also program in Visual Basic.net, and a bit of C. I'm just lazy usually, and tend to use the scripting languages (AHK & AutoIt) when I can.
I think that computers run on smoke. Why? Because when the smoke comes out they don't work anymore! :D
I wonder
what exactly is a scripting language?
Somebody give me a portable video editor... Please!
If ya wanna see my email, go to digitxpsemail.tk (at least for now!)
My dad saved over $850 a month, by switching to Geico! :P
Lol
Do you remember what we told you about searching. :P
Here.
It's kinda sad when my desktop is messier than my room.
Just Wondering
I was just wondering if any progress has been made on this program. I would really like to see that new updater you've been mentioning.
Awesome!!!
Thanx!!! this is an useful program!!! congratulations!!! 8)
Suggestion.-
In some computers (like my own) I press "no" when the app ask me to scan for viruses (My computer have already some up-to-date antiviruses runing) then its stop working...
My suggestion is to change the code a little and if I press "no" also launch the next application, just like when it finish cleaning.
Also, if the App can remember those computers where I pressed "no" and skip the question would be very good... ;)
Anyway, great App.
If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report :D
Bug free version...?
The website indicates the following:
"Version 2.2 http://www.divshare.com/download/3907829-e28 <---- Version 2.2 currently has bugs. I'll try to fix them and re-upload."
Is there a bug free version (2.1 or something)?
I feel like PAFifying it.
May I?
(I just wanted to ask.)
Somebody give me a portable video editor... Please!
If ya wanna see my email, go to digitxpsemail.tk (at least for now!)
My dad saved over $850 a month, by switching to Geico! :P
ClamWin detects AutoMemScan command
Has anyone else scanned their USB drive after installing AutoMemScan and found that it now reports the Autorun.inf file as "suspect"? It even "removed" it in one instance! If I remove the line
Open=PortableApps\AUTOME~1\AUTOME~1.EXE
it passes the scan.
Any solutions? Thanks.
PS: Been having much trouble getting ClamWinPortable to update (from within!) and am now looking forward to trying ClamWinPortableDBUpdate. Hope it works!
portapppaul,
portapppaul,
I am currently not able to get a copy of the file, the stupid web site will not start the download :-)
Upload the file to our two standard testing sites;
VirusTotal:
http://www.virustotal.com/en/indexx.html
and
Jotti:
http://virusscan.jotti.org/
and let the author of the program know the results so he may investigate.
If only ClamAV/Win is detecting it it is possible it is a false positive and he could contact them about it.
Since this is not an Official PortableApps.com product I cannot give you an assurance that it is in fact safe.
However it is not uncommon for virus detectors to have questions about home made applications depending on the methods used to create them, and Clam does have a high false positive rate in these cases.
Tim
Before anyone comments that it is strange that ClamWin is having a problem with the program that launched ClamWin, no, it is not. The app is not part of ClamWin and therefore it is NOT like ClamWin is detecting itself :-P
"The wheels of John grind Slowly, But they grind Exceedingly Small" ;-)
clamwinscan on automemscan with most recent database
Scan Started Sun Jul 27 21:36:58 2008
-------------------------------------------------------------------------------
----------- SCAN SUMMARY -----------
Known viruses: 373880
Engine version: 0.93.1
Scanned directories: 3
Scanned files: 26
Infected files: 0
Data scanned: 1.15 MB
Time: 32.672 sec (0 m 32 s)
--------------------------------------
Completed
-------------------------------------
so if your autorun isn´t altered by a real trojan the virus alert should be wrong.
with clamwin you often get virus alerts on scanning autoit/autohotkey apps
eg xenon file manager posted here and others
procedure as Tim posted makes a real virus alert true and discards the wrong ones
btw I use the clamup for a longtime and it works without complaint when you have direct internet access, proxy doesn´t work
scan of autorun.inf with following lines
Scan Started Sun Jul 27 21:45:07 2008
-------------------------------------------------------------------------------
----------- SCAN SUMMARY -----------
Known viruses: 373880
Engine version: 0.93.1
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Time: 29.843 sec (0 m 29 s)
--------------------------------------
Completed
--------------------------------------
If your autorun.inf has been changed by a virus look here
http://blogs.technet.com/mmpc/archive/2008/06/20/taterf-all-your-drives-...
"Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis .." Friday Next -
"May The Schwartz be with You!" Yogurt the Yoda
ClamWin False Positive Solved
Thanks for posting your Autorun.inf contents. It solved my problem. I had mistakenly ADDED the line
Open=PortableApps\AUTOME~1\AUTOME~1.EXE
to the default PA Autorun.inf instead of REPLACING the default 'Open=' line for PortableApps. Funny how the double 'Open=' lines causes ClamWin to list it as "suspect". I *knew* it was a false positive as we're talking about a simple 4-5 line text file which anyone could create with Notepad... and I did!
Cheers! Now it's on to trying to solve getting the portable ClamWin to update. (Details on the ClamWinPortable Forum).
BTW, I should give full credit here to AutoMemScan which detected no less than NINE viruses in memory on a friend's PC. It works as advertised!!
divshare no longer have free download for Asia region
Hi BluePlanet,
I would like to download the file from your link "http://www.divshare.com/download/3907829-e28"
But it shows "This file is not available to free users in China and Southeast Asia. To download it and any other DivShare file, sign up for a DivShare Personal account for just $9 / year!"
Can you upload the file to another space for me to download.
Thanks,
Alpha Tsui
hi alphatsui, use this Mirror
hi alphatsui,
use this Mirror
regards
NeoRame
Hell was full, so I came back!!!
Sorry for my lousy English!!!