ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Netsky virus undetected by latest ClamWin version
jwadew


Joined: 05 Aug 2006
Posts: 1
Reply with quote
I just discovered my hmailserver email got infected with the Netsky virus. ClamWin had not detected it. Fortunately I caught it before it went too far, by scaning with F-secure and Norton. both of which found the virus.

I thought maybe the virus came some time ago, and only now did F-secure, Norton and ClamWin update to be able to catch it. But no, I have all the latest version and update from ClamWin. I even did the check update to be sure. But scaning the file with ClamWin does not find the virus.

So I uploded the virus to ClamWin, per the FAQ, and the message comes back telling me that virus (under a different name) is already in the updates.

To ClamWin (hopfull you will see this): Can you check this out, and get something in the updates.

Thanks, and keep up the good work. I appreciate your product!
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
I am not sure if this is a problem with clamwin or how you use it with hmailserver. You say that the online scanner detected it, therefore it means that ClamAV/ClamWin already recognise the signature. So I am suspecting that the problem lays elsewhere.

Can you save the infected attachment and scan it with clamwin, as well as online on http://www.virustotal.com
Also please zip it with password "clamwin" and email it to clamwin at clamwin.com

P.S. Please do not make bold alarming statements before the issue is fully investigated, it is quite possible that the problem is with your particular configuration and does not affect all users (I had to edit your post)
View user's profileSend private message
Nico


Joined: 18 Jun 2007
Posts: 3
Reply with quote
Hello all,
I'm a new ClamWin user, I think There is something I don't understand. I hope my question be not stupid.

I have just installed ClamWin 0.90.2.1 (updated today: Jun 18 2007) and put it to the test on my little collection of malware. They are e-mail (.eml files) I have received time by time with viruses enclosed.
I have noticed that ClamWin don't detect several viruses (though, it has recognized other viruses I have checked):

W32/Netsky.P@mm (F-Prot) ***
W32.Beagle.FG@mm (Symantec) ***

TR/Dldr.Stration.C (Avira)
TR/Dldr.Stration.Gen (Avira)
Worm/Warezov.FH (Avira)

*** I have sent the first two files to the scan service on line, but it said me they already are known.

Some suggestion?

Thank you
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
you need to turn on "treat files and mailboxes" in advanced settings tab. It is turned off by default because email files are not directly executable
View user's profileSend private message
Nico


Joined: 18 Jun 2007
Posts: 3
Reply with quote
Thank you so much, alch, for suggesting me an effective system to solve my problem. ClamWin has detected all viruses.
View user's profileSend private message
Netsky virus undetected by latest ClamWin version
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic