OS2 World Community Forum

OS/2, eCS & ArcaOS - Technical => Applications => Topic started by: Remy on October 05, 2017, 02:54:31 pm

Title: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on October 05, 2017, 02:54:31 pm
Hi,

Updated ClamAV-GUI v3.5.1 (rexx based) with many additions is available on my web page.
http://remydodin.levillage.org/en/realisations.php?item=5900&id=realisations

About changes since v3.2.2
http://remydodin.levillage.org/en/realisations.php?item=5902&id=realisations

Any suggestions ?

Remy

Updated to point to my "EN" language web pages
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: guzzi on October 05, 2017, 11:18:42 pm
A clamavgui RPM package to go with the clamav rpms?
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on October 06, 2017, 01:38:17 pm
A clamavgui RPM package to go with the clamav rpms?

It is WPI package and build for latest ClamAV ( RPM packaged )

From under my web page :

clamav clamav-update clamav-server-0.98.6-6.oc00 (05/02/2015)
Repository: Netlabs stable (link is external) (or zip)
Prefer install it using ArcaOS package manager (ANPM) else :
yum install clamav clamav-data clamav-lib clamav-scanner clamav-server clamav-update

It is compatible with older Clamav build installed through WPI or zip package too.

note: updated my links to point to my "EN" language pages
          I plan to make a RPM package too but currently, I didn't build any RPM package and will first learn howto  :D   


Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: JON on October 23, 2017, 07:10:39 pm
Thanks so much for your website and in the fact that it so clearly explains what you can do with v3.5.1. as a dedicated user. I noted that you explain the log file actions in that the entries therein enable users to act on intrusion. In particular you mention "root" - does this mean I can correct the action caused by a root kit? My commodo firewall recently has flags which I cannot seem to trace back to the original time/date and cause of the intrusion. Any indication as to how to fix this interruption would be greatly appreciated. In the meantime I will set up a routine that boots to your site as a private user so I can keep up with any changes that you make in the future. Again, thanks so much for your clarity and your kindness...

Jon
COO DataSAFE Forensics
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on October 25, 2017, 09:14:31 pm
Hi,

No, this has nothing to do with rootkit.
( most exposed paths will be checked, like libpaths, os2 main path etc... - because it used less time, I always have it set to scan main files before the selected paths or disk )

- You can enable a default option in case no selection to be scanned is added into the scan list field ( home, temp paths ...  will be checked )
- Memory scan option will search which programs, dlls are loaded out of an OS2 cmd and will then scan the programs/dlls from the loaded location (which is "same" as in memory)

- You have TCP/IP options to check current activities, detect open unexpected ports (added option to check port usage from web link) or unusual activities with the possibility to stop the interface during a scan in case of suspected virus activity and to prevent it to reload a virus through internet if found. I had some bad experience under windows where viruses loaded an amount of viruses due open internat link.

- Tips, from time to time, my internet link is unresponsive, I than do a full dhcp interface restart (including interface disable/enable) from under my GUI and things seems to get responding again !
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on December 03, 2017, 12:51:31 am
Foy your information,

I did a try using ClamAV 0.99.2 from experimental netlabs (except debuginfo)
http://rpm.netlabs.org/experimental/00/i386/i686/
 clamav-0.99.2-2*

To have it work under ArcaOS, I needed to install libtool-ltdl (ANPM)
(or  http://rpm.netlabs.org/release/00/zip/   -    libtool-2.4.6-3 oc00.zip if no ANPM or RPM)

The initial test I did using it through ClamAVGUI seems to be ok, may be some of you could give it a try too.
Here is a screenshot about ClamAVGUI with initialized ClamAV 0.99.2

Cheers/2
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on December 03, 2017, 05:52:52 am
It looks like when clamd (daemon) is bakground running, it prevents ff and tb to start.   
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Doug Bissett on December 03, 2017, 07:55:48 am
Clamd.exe, from 0.99.2, uses a huge amount of upper shared memory space.  Try increasing VIRTUALADDRESSLIMIT to, at least, 2560, but 3000 might be better.
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on December 03, 2017, 09:40:50 pm
I have it allready set to 2560
I'll give it a try with 3000 !
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Dave Yeo on December 04, 2017, 01:22:25 am
Should be 3072 (a round number in hexadecimal)
Title: Re: ClamAV-GUI v3.5.1 (rexx based)
Post by: Remy on December 04, 2017, 09:43:49 pm
With VIRTUALADDRESSLIMIT=3072, it works well and FF could run with running ClamD 0.99.2
Thanks