ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Bug Report - ClamWin memory unload program option
byrnejb


Joined: 03 Mar 2016
Posts: 2
Location: Hamilton, Ontrio, Canada
Reply with quote
Jitsi-2.8.5426
MS-Win 7Pro Version 6.1.7601 Service Pack 1 Build 7601
ClamWin-0.99

In case anyone else runs into this. If you are using ClamWin and you
have the 'Tools -> Preferences -> General -> "Unload Infected Programs
from Computer Memory" option' checked then Jitsi will not run. It may
show the plugins loading splash screen and stall; or it may do nothing
at all. Viewing the Jitsi process in the Task Manager will show Jitsi
consuming ~54Mb of memory and 0% CPU.

Starting ClamWin with Jitsi alredy running and connected will
immediately stop Jitsi from functioning and destroy whatever sip
credentials are in use by Jitsi at that moment. It will not kill the
Jitsi process however.
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
I will send this over to the ClamWin team and see what they say about this. Thank you for reporting this issue.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4335
Location: USA
Reply with quote
Did ClamWin quarantine anything? How long have you been using Jitsi? Just to be sure, you might upload the executable to Virus Total and see what other AVs say about it.

Regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
Bob.

Jitsi is similar to skype but different. It is used for desktop sharing, prensations, audio chat, and some other things. It is 100% safe and it is open-source.

See here: https://jitsi.org/Main/HomePage
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4335
Location: USA
Reply with quote
Thanks for the info--looks to be a useful app. My concern was/is a malware dropped via drive-by download that injects into the Jitsi process due to an exploit. Of course--it would only be in memory and not in the executable file on disk, so I guess Virus Total might not be of any help.

Regards,
View user's profileSend private message
byrnejb


Joined: 03 Mar 2016
Posts: 2
Location: Hamilton, Ontrio, Canada
Reply with quote
GuitarBob wrote:
Did ClamWin quarantine anything? How long have you been using Jitsi? Just to be sure, you might upload the executable to Virus Total and see what other AVs say about it.

Regards,


Nothing was quarantined and ClamWin does not consider the disk files associated with Jitsi as having any suspicious content.

We have been using Jitsi for about six months. The problem first evidenced itself on just one of my staff's home computer last November. Other users have not encountered this problem. We have been trying to figure out what is going on for some time. About three weeks ago the user discovered that Jitsi would work if they switched off ClamWin. The other users do not use ClamWin.

I was provisioning a company laptop today and ran into the same problem. After poking around in the preferences I ran across that setting and turned it off just to see what would happen. And Jitsi ran with that setting deactivated.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4335
Location: USA
Reply with quote
I downloaded a copy of Jitsi. I'll install it tomorrow and let you know how it goes.

Regards,
View user's profileSend private message
Bug Report - ClamWin memory unload program option
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic