OS2 World Community Forum
OS/2, eCS & ArcaOS - Technical => Applications => Topic started by: Remy on October 05, 2017, 02:54:31 pm
-
Hi,
Updated ClamAV-GUI v3.5.1 (rexx based) with many additions is available on my web page.
http://remydodin.levillage.org/en/realisations.php?item=5900&id=realisations
About changes since v3.2.2
http://remydodin.levillage.org/en/realisations.php?item=5902&id=realisations
Any suggestions ?
Remy
Updated to point to my "EN" language web pages
-
A clamavgui RPM package to go with the clamav rpms?
-
A clamavgui RPM package to go with the clamav rpms?
It is WPI package and build for latest ClamAV ( RPM packaged )
From under my web page :
clamav clamav-update clamav-server-0.98.6-6.oc00 (05/02/2015)
Repository: Netlabs stable (link is external) (or zip)
Prefer install it using ArcaOS package manager (ANPM) else :
yum install clamav clamav-data clamav-lib clamav-scanner clamav-server clamav-update
It is compatible with older Clamav build installed through WPI or zip package too.
note: updated my links to point to my "EN" language pages
I plan to make a RPM package too but currently, I didn't build any RPM package and will first learn howto :D
-
Thanks so much for your website and in the fact that it so clearly explains what you can do with v3.5.1. as a dedicated user. I noted that you explain the log file actions in that the entries therein enable users to act on intrusion. In particular you mention "root" - does this mean I can correct the action caused by a root kit? My commodo firewall recently has flags which I cannot seem to trace back to the original time/date and cause of the intrusion. Any indication as to how to fix this interruption would be greatly appreciated. In the meantime I will set up a routine that boots to your site as a private user so I can keep up with any changes that you make in the future. Again, thanks so much for your clarity and your kindness...
Jon
COO DataSAFE Forensics
-
Hi,
No, this has nothing to do with rootkit.
( most exposed paths will be checked, like libpaths, os2 main path etc... - because it used less time, I always have it set to scan main files before the selected paths or disk )
- You can enable a default option in case no selection to be scanned is added into the scan list field ( home, temp paths ... will be checked )
- Memory scan option will search which programs, dlls are loaded out of an OS2 cmd and will then scan the programs/dlls from the loaded location (which is "same" as in memory)
- You have TCP/IP options to check current activities, detect open unexpected ports (added option to check port usage from web link) or unusual activities with the possibility to stop the interface during a scan in case of suspected virus activity and to prevent it to reload a virus through internet if found. I had some bad experience under windows where viruses loaded an amount of viruses due open internat link.
- Tips, from time to time, my internet link is unresponsive, I than do a full dhcp interface restart (including interface disable/enable) from under my GUI and things seems to get responding again !
-
Foy your information,
I did a try using ClamAV 0.99.2 from experimental netlabs (except debuginfo)
http://rpm.netlabs.org/experimental/00/i386/i686/
clamav-0.99.2-2*
To have it work under ArcaOS, I needed to install libtool-ltdl (ANPM)
(or http://rpm.netlabs.org/release/00/zip/ - libtool-2.4.6-3 oc00.zip if no ANPM or RPM)
The initial test I did using it through ClamAVGUI seems to be ok, may be some of you could give it a try too.
Here is a screenshot about ClamAVGUI with initialized ClamAV 0.99.2
Cheers/2
-
It looks like when clamd (daemon) is bakground running, it prevents ff and tb to start.
-
Clamd.exe, from 0.99.2, uses a huge amount of upper shared memory space. Try increasing VIRTUALADDRESSLIMIT to, at least, 2560, but 3000 might be better.
-
I have it allready set to 2560
I'll give it a try with 3000 !
-
Should be 3072 (a round number in hexadecimal)
-
With VIRTUALADDRESSLIMIT=3072, it works well and FF could run with running ClamD 0.99.2
Thanks
-
ClamAVGUI 3.6 in progress (under test)
New options:
- generate and compare MD5 SHA SHA256 file checksum ( use of Clamav provided function - sigtool )
( The compare option requires cca_112 to provide copy/paste from clipboard into rexx dialogs)
- Select a file from menu file option to be scanned
- tried to add a rootkit (very basic process - create a initial main system files liste with size at install time. Then check if some of them are been changed or not compared to the initial "image")
-
Hi !
I hope putting online 3.6.0 on Monday the 15th January.
It has some added options and of course, you can drag/drop files or folder on it to be scanned and you can call it from under WPS folder menu
after updating the menu entry with a link to ClamAVGUI as before.
- To do this -
Open "Extented Menu Options" folder provided under ArcaOS
Edit -> create an other (program)
with :
Full program path
%* as Parameters
path as working directory
- End -
Add the extra package from hobbes as suggested into readme.1st
Here is a view about update ClamAVGUI with it desktop widget at the right bottom