ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Common virus extenstions
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
I was wondering if anyone would provide me a list of common virus extensions that I can add to Clam Sentinel. I removed all of my extensions and are starting over and I lost the default ones.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4350
Location: USA
Reply with quote
You could uninstall Clam Sentinel and then re-install it to get the full list of default extensions back. It consists of about 120 extensions, which is pretty complete. This list is used primarily by Clam Sentinel when it scans with ClamWin. The Clam Sentinel heuristic scan that is done on a file before the scan with ClamWin uses a smaller list of built-in extensions.

I have chosen not to use the default list in Clam Sentinel, and I use a smaller custom list of 40 extensions. Below is the extension section of my Clam Sentinel .ini configuration file:

;### Custom File extensions that you want to scan
ExtToScan=.ASPX,.BAT,.BIN,.CAB,.CLASS,.CMD,.COM,.CPL,.DLL,.DOC,.DOCX,.DRV,.EML,.EXE,.HTM,.HTML,.INF,.JAR,.JOB,.JS,.LNK,.MSI,.OCX,.PDF,.PIF,.PPT,.PPTX,.RAR,.REG,.RTF,.SCR,.SWF,.SYS,.TMP,.URL,.VBE,.VBS,.XLS,.XLSX,.ZIP

Below is the default list of 120 extensions:

;### File extensions that you want to scan
;ExtToScan=.386,.3D,.3GR,.7Z,.ACE,.ACM,.ACV,.ADD,.APP,.ARC,.ARJ,.ASD,.ASP,.ASPX,.AVB,.AVI,.AX,.BAT,.BIN,.BOO,.BTM,.CAB,.CDR,.CHM,.CLA,.CLASS,.CMD,.CNV,.COM,.CPL,.CPT,.CRT,.CRX,.CSC,.CSH,.CTL,.DEX,.DLL,.DMD,.DOC,.DOCX,.DOT,.DRV,.DVB,.DWG,.EMAIL,.EML,.EVT,.EXE,.FLT,.FON,.FOT,.GMS,.GVB,.GZ,.HLP,.HTA,.HTM,.HTML,.HTT,.INF,.INI,.INS,.ISP,.IST,.JAR,.JOB,.JS,.JSE,.JSP,.KSH,.LIB,.LNK,.MHT,.MHTM,.MHTML,.MSC,.MSI,.MSO,.MSP,.MST,.MWT,.OBJ,.OCX,.OV?,.OVL,.PCD,.PCI,.PDF,.PGM,.PH,.PHTM,.PI,.PIF,.PL,.PLX,.PM,.PPT,.PPTX,.PRG,.PWZ,.RAR,.REG,.RTF,.SCF,.SCR,.SCT,.SH,.SHB,.SHM,.SHS,.SMM,.SPL,.SWF,.SYS,.TMP,.URL,.VB,.VBA,.VBE,.VBS,.VBX,.VS,.VXD,.WIZ,.WS,.WSC,.WSF,.WSH,.XLS,.XLSX,.XPD,.ZIP

My Clam Sentinel .ini configuration file contains both lists. I can switch between them by using the ; prefix to the ExtToScan. Remove the ; prefix from the list that you want to use. The list with the ; prefix will not be used. Change the .ini configuration file to the list you want to use and save the .ini file, then stop Clam Sentinel and exit Clam Sentinel, and then click on the Clam Sentinel badge on your desktop to start it up with your extension list.

Regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
Just out of curiosity, is ClamWin capable of scanning files that don't have any end extension? For instance, go to C:\Windows\SUA and look at all the files in there and none of them have any end extensions, atleast on my Windows 7 system. Is it capable of scanning those files?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4350
Location: USA
Reply with quote
ClamWin will scan any single file from the Windows Explorer right click menu. It scans folders based on the filters you have configured. If you don't have any filters configured, then it will scan all files, which is the default. This results in a long scan time when scanning an entire drive. Malware will normally be in just a few types of extensions. I know one AV that only scans for about 60 extensions; however, most of them seem to scan more than the 120 default number that Clam Sentinel uses.

Regards,
View user's profileSend private message
Common virus extenstions
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic