Security Apps Support

I love the FF extension ClamGlue, and i like how Winpooch is able to hook ClaimWin, but this all seems to work if Clam is installed on the hard-drive, not on the USB.

So my question is, how would i go about getting portable ClamWin to integrate with Winpooch (on the USB) and portable FF + the ClamGlue extension?

Is this even possible?

With a little trial and error I've managed to set up pFirefox to use my install of pClamWin AV to automatically scan downloads. I am using the Download Statusbar 0.9.4.1 extention and used the example from the ClamWin website for enabling virus scans in Winzip. It required one change to keep pClamWin AV from choking on the spaces in the filename.

From the ClamWin website (http://www.clamwin.com/content/view/117/89/):
Scan Program: C:\Program Files\ClamWin\bin\ClamWin.exe
Parameters: --mode=scanner --path="%d" --close

In the Virus Scan tab of the extension options:
Anti-Virus program location: G:\Portable Apps\PortableClamWin\PortableClamWin.exe

I tried to put Clamwin into U3 format but I get a problem when I tried to download the new virus definitions:

Could not start process:
"C:\Program Files\ClamWin\bin\freshclam.exe" --stdout --datadir="C:/Documents and Settings/All Users/.clamwin/db" --config-file="c:/docume~1/than/locals~1/temp/tmp8vuov6" --log="c:/docume~1/than/locals~1/temp/tmpizwjzu"
Error: Could not start process.
C:\Program Files\ClamWin\bin\freshclam.exe
File does not exist.

it was clear that Clamwin doesn't recognise the drive letter (mine was H:) so it goes to drive C:

I didn't edit anything yet. So I think I have to edit a perimeter somewhere so that ClamWin would recognise the U3 drive letter.

I just download portable ClamWin 0.88.2.3, but i can not extract the file to my flashdisk. It's show messsenge ClamWin 0.88.2.3.exe is not supported archive..
Please, i want to install this apps hurry.. THX.

Is there anyway I can auto update? any switches etc.

Currently I run a few things when I first run up PStart, and would like to update clamwin too. I tried the freshclam.exe but it wants a config, which is clamd.conf (the linux name from what I recall)... I tried pointing it to the ClamWin.conf but it looks like these are not the same.

Also, the clamwin/ and app/clamwin/ folders have the same files... is there any reason for this?

I sue Portable apps nd keep them on a separate drive to my Widnoes installation. Is there a way I can add "scan with clamwin" to the context menu in the way that exists with the non-portable version?

You can shrink it more...
...just use UPX on PortableClamWin\App\clamwin\lib\*.pyd
15.0 MB -> 11.4 MB (both including over 3MB of updates)
10.7 MB -> 7.13 MB (without updates), so over 3.5MB is saved (1/3 !)

BTW, great job!
Greetings

pps

When I try running ClamWin on a write protected usb drive I get errors saying it is unable to write to the media. Why does ClamWin require writing to the drive?

I use my USB drive for repairing infected machines and as a precaution I keep my usb key write protected. Ideally ClamWin should have the option of running on a read only disk.

I downloaded the ClamWin Antivirus.
I installed it on my flashdrive, when I opened it, it prompted me to download "Virus Definitions Database", and when I clicked "Yes", it gave me this error.

ClamAV update process started at Sat Apr 22 03:03:19 2006
ERROR: Can't get information about database.clamav.net: No IP address
Connection with database.clamav.net (IP: ???) failed.
Trying again in 5 secs...
ClamAV update process started at Sat Apr 22 03:03:19 2006
ERROR: Can't get information about database.clamav.net: No IP address
Connection with database.clamav.net (IP: ???) failed.

EDIT: The ClamWin people have fixed it, so you can disregard this topic now

This app looked like a good idea, however I receive many false positives while scanning.

For example:
F:/PortableClamWin/PortableClamWin.exe: Trojan.Clicker.VB-20 FOUND
F:/PortableFileZilla/PortableFileZilla.exe: Trojan.Clicker.VB-20 FOUND
F:/PortableThunderbird/PortableThunderbird.exe: Trojan.Clicker.VB-20 FOUND

I saw on the PCW page that there is a known issue for a false positive, but if this is a regular thing I'm not sure I can trust it. Still going to keep it around though.