Author Topic: ClamAV-GUI v3.5.1 (rexx based)  (Read 2503 times)

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
ClamAV-GUI v3.5.1 (rexx based)
« on: October 05, 2017, 02:54:31 pm »
Hi,

Updated ClamAV-GUI v3.5.1 (rexx based) with many additions is available on my web page.
http://remydodin.levillage.org/en/realisations.php?item=5900&id=realisations

About changes since v3.2.2
http://remydodin.levillage.org/en/realisations.php?item=5902&id=realisations

Any suggestions ?

Remy

Updated to point to my "EN" language web pages
« Last Edit: October 06, 2017, 01:39:24 pm by Remy »

guzzi

  • Sr. Member
  • ****
  • Thank You
  • -Given: 0
  • -Receive: 14
  • Posts: 271
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #1 on: October 05, 2017, 11:18:42 pm »
A clamavgui RPM package to go with the clamav rpms?

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #2 on: October 06, 2017, 01:38:17 pm »
A clamavgui RPM package to go with the clamav rpms?

It is WPI package and build for latest ClamAV ( RPM packaged )

From under my web page :

clamav clamav-update clamav-server-0.98.6-6.oc00 (05/02/2015)
Repository: Netlabs stable (link is external) (or zip)
Prefer install it using ArcaOS package manager (ANPM) else :
yum install clamav clamav-data clamav-lib clamav-scanner clamav-server clamav-update

It is compatible with older Clamav build installed through WPI or zip package too.

note: updated my links to point to my "EN" language pages
          I plan to make a RPM package too but currently, I didn't build any RPM package and will first learn howto  :D   


« Last Edit: October 06, 2017, 01:41:39 pm by Remy »

JON

  • Newbie
  • *
  • Thank You
  • -Given: 3
  • -Receive: 0
  • Posts: 16
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #3 on: October 23, 2017, 07:10:39 pm »
Thanks so much for your website and in the fact that it so clearly explains what you can do with v3.5.1. as a dedicated user. I noted that you explain the log file actions in that the entries therein enable users to act on intrusion. In particular you mention "root" - does this mean I can correct the action caused by a root kit? My commodo firewall recently has flags which I cannot seem to trace back to the original time/date and cause of the intrusion. Any indication as to how to fix this interruption would be greatly appreciated. In the meantime I will set up a routine that boots to your site as a private user so I can keep up with any changes that you make in the future. Again, thanks so much for your clarity and your kindness...

Jon
COO DataSAFE Forensics

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #4 on: October 25, 2017, 09:14:31 pm »
Hi,

No, this has nothing to do with rootkit.
( most exposed paths will be checked, like libpaths, os2 main path etc... - because it used less time, I always have it set to scan main files before the selected paths or disk )

- You can enable a default option in case no selection to be scanned is added into the scan list field ( home, temp paths ...  will be checked )
- Memory scan option will search which programs, dlls are loaded out of an OS2 cmd and will then scan the programs/dlls from the loaded location (which is "same" as in memory)

- You have TCP/IP options to check current activities, detect open unexpected ports (added option to check port usage from web link) or unusual activities with the possibility to stop the interface during a scan in case of suspected virus activity and to prevent it to reload a virus through internet if found. I had some bad experience under windows where viruses loaded an amount of viruses due open internat link.

- Tips, from time to time, my internet link is unresponsive, I than do a full dhcp interface restart (including interface disable/enable) from under my GUI and things seems to get responding again !
« Last Edit: October 25, 2017, 09:20:58 pm by Remy »

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #5 on: December 03, 2017, 12:51:31 am »
Foy your information,

I did a try using ClamAV 0.99.2 from experimental netlabs (except debuginfo)
http://rpm.netlabs.org/experimental/00/i386/i686/
 clamav-0.99.2-2*

To have it work under ArcaOS, I needed to install libtool-ltdl (ANPM)
(or  http://rpm.netlabs.org/release/00/zip/   -    libtool-2.4.6-3 oc00.zip if no ANPM or RPM)

The initial test I did using it through ClamAVGUI seems to be ok, may be some of you could give it a try too.
Here is a screenshot about ClamAVGUI with initialized ClamAV 0.99.2

Cheers/2
« Last Edit: December 03, 2017, 01:10:52 am by Remy »

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #6 on: December 03, 2017, 05:52:52 am »
It looks like when clamd (daemon) is bakground running, it prevents ff and tb to start.   
« Last Edit: December 03, 2017, 09:41:10 pm by Remy »

Doug Bissett

  • Hero Member
  • *****
  • Thank You
  • -Given: 1
  • -Receive: 39
  • Posts: 1008
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #7 on: December 03, 2017, 07:55:48 am »
Clamd.exe, from 0.99.2, uses a huge amount of upper shared memory space.  Try increasing VIRTUALADDRESSLIMIT to, at least, 2560, but 3000 might be better.

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #8 on: December 03, 2017, 09:40:50 pm »
I have it allready set to 2560
I'll give it a try with 3000 !

Dave Yeo

  • Hero Member
  • *****
  • Thank You
  • -Given: 8
  • -Receive: 100
  • Posts: 1384
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #9 on: December 04, 2017, 01:22:25 am »
Should be 3072 (a round number in hexadecimal)

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #10 on: December 04, 2017, 09:43:49 pm »
With VIRTUALADDRESSLIMIT=3072, it works well and FF could run with running ClamD 0.99.2
Thanks   

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #11 on: January 01, 2018, 08:57:41 pm »
ClamAVGUI 3.6 in progress (under test)

New options:
- generate and compare MD5 SHA SHA256 file checksum ( use of Clamav provided function - sigtool )
  ( The compare option requires cca_112 to provide copy/paste from clipboard into rexx dialogs)
- Select a file from menu file option to be scanned
- tried to add a rootkit (very basic process - create a initial main system files liste with size at install time. Then check if some of them are been changed or not compared to the initial "image") 

Remy

  • Full Member
  • ***
  • Thank You
  • -Given: 0
  • -Receive: 7
  • Posts: 100
    • View Profile
Re: ClamAV-GUI v3.5.1 (rexx based)
« Reply #12 on: January 12, 2018, 08:57:03 pm »
Hi !

I hope putting online 3.6.0 on Monday the 15th January.

It has some added options and of course, you can drag/drop files or folder on it to be scanned and you can call it from under WPS folder menu
after updating the menu entry with a link to ClamAVGUI as before.
- To do this -
Open "Extented Menu Options" folder provided under ArcaOS
Edit -> create an other (program)
with :
Full program path
%* as Parameters
path as working directory
- End -

Add the extra package from hobbes as suggested into readme.1st

Here is a view about update ClamAVGUI with it desktop widget at the right bottom