ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Server 2003 and Clam/ Sentinel
rickycr


Joined: 17 Apr 2014
Posts: 2
Reply with quote
I have a server running server 2003. I have installed the clam antivirus and sentinel program. The server has no keyboard or monitor hooked up to it due to space limitations. Due to this, I am unable to login to the console, but can do so with remote administration with terminal services. Is the server protected with the "real time" sentinel program even though the machine is not logged in?
When I log in with terminal services, the sentinel program pops up in the lower right corner.
Thanks for the information.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4390
Location: USA
Reply with quote
Since this is the ClamWin forum, and Clam Sentinel is another project, for a definitive answer, you need to visit the Clam Sentinel web site. However, in my opinion, if Clam Sentinel was installed on the server, and there is some sort of a Windows OS on the server, then it is protected by Clam Sentinel. If there is no OS on the server, it is not protected--unless Clam Sentinel was installed elsewhere under an OS that the server runs under. I understand that network support was added with Clam Sentinel version 1.21.

I hope this helps.

Regards,
View user's profileSend private message
rickycr


Joined: 17 Apr 2014
Posts: 2
Reply with quote
Thanks for the information. Do you know if a way i can test the Clam software to see if its actually working as designed? i know another AV vendor suggested downloading a file that was not a virus, but had the code of one and the software was supposed to quarantine it. if the software quarantined the file (it was harmless), you knew the program was working properly.
View user's profileSend private message
daveydoom


Joined: 30 Nov 2008
Posts: 60
Location: Canada
Reply with quote
That would be EICAR:
http://www.eicar.org/86-0-Intended-use.html

Smile
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4390
Location: USA
Reply with quote
Clam Sentinel scans for suspicious files and also uses the ClamWin virus signatures to detect known viruses. The Clam Sentinel default is set to quarantine all detected files as either "suspicious" or "infected." Infected files are detections with the ClamWin signatures. As Davey said, you can use the EICAR test file to check that the ClamWin signatures are working, but there's no good way to check the Clam Sentinel suspicious file detection except to download a virus to your computer! You should not do that, so I suggest that you verify all suspiicous file detections with the Jotti or Virus Total online scanners.

If several of the online antivirus programs (besides the Clam AV scan engine used by ClamWin) detect a suspicious file, then it is probably infected. Sometimes Clam Sentinel will falsely detect a suspicious file (a false positive detection). You should whitelist all falsely-detected suspicious files in Clam Sentinel's advanced settings, paths or files not scanned to keep them from being falsely detected again. Be sure to read the Clam Sentinel Simple Guide to make sure you understand the program.

Thanks for using ClamWin/Clam Sentinel.

Regards,
View user's profileSend private message
Server 2003 and Clam/ Sentinel
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic