ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
ClamPack Updater - ClamWin and ClamSentinel Pack
clameater


Joined: 09 Jul 2016
Posts: 4
Reply with quote
ClamPack Official Download: http://repo.a2af37vnxe44tcgo.onion/ (Require "Tor Browser" or Tor)
Image: https://i.imgur.com/o7MO38t.jpg

"ClamPack" is one-click updater for ClamWin and ClamSentinel.
It is highly configurable. I'm using it on my company network to save
bandwidth & easy-to-management all clients. (all office PCs are using ClamWin)

Pros:
+ Open source!
+ You can setup your own server if you don't trust 3rd party.

Cons:
- Not for "noob"; user must know about 7Zip(and Tor if he/she use default service).
View user's profileSend private message
clameater


Joined: 09 Jul 2016
Posts: 4
Reply with quote
Here's my config file(partial).

VersionCheckURL http://proxyserver.office/ clamav.php?version=%%VER%%
PackDownloadURL http://proxyserver.office/ clamav_bl.7z
HTTPProxy none


Network Image:
Clients ---> proxyserver.office
Bandwidth cost: "ZERO" (network)

If I don't using "ClamPack":
Clients ---> Download and install ClamWin and ClamSentinel separately
Bandwidth cost: (Clients * 2) (Internet)
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4155
Location: USA
Reply with quote
Let me caution all users to verify links (from new/unknown sources) with Virus Total before you click on them and to also verify files that you have downloaded with Virus Total before you install/execute them.

Regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 556
Location: **UNKNOWN**
Reply with quote
Virustotal won't be able to analyze onion connections, but I am curious as to know why you only have it available as onion?

Also, what is the purpose of this? ClamWin and Clam Sentinel both of a built in updater already.
View user's profileSend private message
clameater


Joined: 09 Jul 2016
Posts: 4
Reply with quote
I'm not the author. I just found it recently.

>ClamWin and Clam Sentinel both of a built in updater already.
Really? For "client" update? Isn't it just a "update notification"?
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 556
Location: **UNKNOWN**
Reply with quote
Yes, they mostly just notify user. I mean I get your point, it would be useful for more limited bandwidth users or even servers environments, but since it's part of the dark web, I don't know if I would trust it (I am not saying everything on the dark web is not trustworthy, but I still just don't trust it).

Also, you should analyze the files on Virustotal to make sure they are clean.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4155
Location: USA
Reply with quote
"Also, you should analyze the files on Virustotal to make sure they are clean."

Isn't that what I already said? If a file is a Windows file, you should be able to scan it on Virus Total, Virus Scan, or Jotti. You might have to get out of Tor to do so if you downloaded it while using that browser, but you should be able to scan any file on the online scanners. Just don't install/execute a file until the scanner says it is clean. I like to see what 2 or more of these AVs say abut a file: Antivir, Bitdefender, Eset Nod32, Kaspersky, and Sophos.

Regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 556
Location: **UNKNOWN**
Reply with quote
Sorry bob. When you said analyze link in your original post, I thought you meant he should analyze the URL on virustotal, which you won't be able to as virustotal doesn't recognize onion links (go ahead and try it if you don't believe me). Mostly because onion/tor links are beyond search engine and AV grasps. However, you are correct, the files themselves should be able to be scanned by a AV or even uploaded to Virustotal.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4155
Location: USA
Reply with quote
I was mainly talking about the files, but many links can be analyzed by a knowledgeable user: hover the mouse to see if the actual link matches the words of description, be careful with the bitly-type shortened stuff from questionable sources, and look for strange things in the actual link--places (maybe ru,etc.),/descriptions/etc. When I was working malware, if I couldn't tell a file was malicious, I looked at the source instead, so look at the source of a link or file. If you don't know about the source, forget the link/file.

Regards,
View user's profileSend private message
ClamPack Updater - ClamWin and ClamSentinel Pack
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic