Today I have released a new version 1.10 that contains only changes for Win9x/ME.
There is a new version of the virtual driver Sentinel.vxd that now uses semaphores and has a more large buffer.

bye,
Aru

Thanks aru.

Hi all,

New Clam Sentinel version 1.11 has been released.
Some changes, some fixes and multi languages support (english, french, italian).

bye,
aru

I've read the forum so far, and I've installed and tried the software. What I was originally looking for, I'm not sure is possible, but maybe with some help or suggestions from other users I can still find what I need...

We have a class room setup with some fairly old P4 machines in it. They are not on the internet, so the only way they can really get an infection is through a USB drive or other external means, and that has happened several times. We don't feel the need to pay for protection since they aren't online, but I am also getting tired of cleaning and re-imaging every time there is an infection. Granted this isn't often, but it still costs time.

I have found that while running Sentinel, they do run quite slowly for our class. We got a lot of complaints about that the first days. So what I did was stop monitoring the fixed disks. This sped things up as expected but also still detects USB drives being plugged in.

The problem is that when the dialog comes up to scan the USB for viruses, you can still click NO. And after clicking NO, you can still use the drive.

Would there or is there a way to configure something so that the USB could not be used unless first scanned? Does anyone know of a way to do this?

Or even more ideally, is there a way to monitor only USB activity and Internet activity? In theory the machines are virus free after a full scan, and the only way to catch one is via internet (which the Teacher's machine does have access to), or via USB drive. That way when our students are learning our software, the machine wouldn't slow down, but in theory would still be protected.

Any help or ideas would be very appreciated.

Thanks,
Roy

Hello Roy: the only way you can be selective with Sentinel scanning is via the file extensions that are scanned. For scanning the internet only, you might delete all the file extensions that are scanned except: htm, png, swf, html, url, lnk, flv, ocx, php, and js. Check the Sentinel real-time scan log after surfing for awhile, and you will see that these are the extensions you see most often. Warning though, this will leave you open to the most common virus infections from downloading infected files: exe, dll, tmp, sys, scr, pdf, inf, pif, com, and zip. Also, here are the most common extensions you might find in daily computer use: doc, xls, ppt, rtf, xlm, hlp, cpl, crt, vbs, and cmd. Finally, here are common extensions you might encounter in a power user mode: bat, jse, mdb, msi, reg, shs, vb, vbe, wsf, and wsh. I hope this helps.

Perhaps ARU can suggest something re: the USB.

Regards,

Take a look to the runtime log file.
It's possible that there are some programs that write more files and that you can exclude by the Advanced settings -> Paths not scanned.
Perhaps your class use often some types of files (like .doc) so you can exclude these files from the monitor with the Avanced settings -> Extensions Scanned.



The problem is that with large usb keys the scan process require some minutes each time that you plug the device. It's not a good idea.



This is not possible actually and require some works.

For me that right way is to view the log file and exclude paths or extensions that active often a lot of scans.

bye,
aru

There are some paid USB scanners on the market, and there a couple of free ones as well. Perhaps one of them will have what you need. Do some Googling for them.

Many viruses on USB are of the autorun type. There is a free product for autorun viruses from Old McDonald at https://oldmcdonald.wordpress.com/2009/06/02/autorun-eater-v24/ on the web. I do not know if it monitors USB, but check it out.

Regards,

Thanks for the tips guys, I'll keep playing around and see what I can come up with. And that USB scanner may also be useful. I had looked for such things, I just apparently had been searching the wrong set of words because I hadn't run across Old McDonald. I'll test it out as well. I'm still keeping an open mind, so any other ideas will still be appreciated

Aru, thanks for a great product. I mostly run Linux boxes for both servers and desktop but on the few windows XP/Vista boxes I look after I've recently uninstalled freeAVG and put in clamwin and clam sentinel. Can I assume this will keep me at as safe (or reasonable as safe) as freeAVG did or this meant to be a solution for win98 only?

ClamWin with Sentinel is easier on resources than AVG free, but it does not provide as comprehensive protection as does AVG or most commercial AV products. Whle Sentinel enables you to scan in real-time with ClamWin, it does not scan in all situations--it only scans when files are placed on the computer or when they are modified. This may have been sufficient 10 years ago, but it does not protect in all situations in which files might be accessed today. Additionally, some AVs now provide some browser protection and/or some behavior blocking protection. The ClamWin/Sentinel combination does not provide either.

So the ClamWin/Sentinel combination provides basic protection with a fairly light footprint, which may be sufficient if the user engages in "safe surfing;" however, in today's world of "drive-by downloads," SEO-poisoned web searches, exploits, (and who knows what else), it is certainly not complete protection. On the other hand, no AV/security product provides it either!

Below are some ways you can enhance protection with ClamWin/Sentinel using other free security software (in no particular order/preference):

1. ClamWin/Sentinel, free WinPatrol
2. ClamWin/Sentinel, free WinPatrol, Spyware Blaster
3. ClamWin/Sentinel, free WinPatrol, Windows Defender
4. ClamWin/Sentinel, Threatfire
5. ClamWin/Sentinel, free WinPatrol, free (SuperAntiSpyware or Malwarebytes Antimalware)

Regards,

Hello everyone, new user here to ClamWin/Sentinel.


I too was searching computer forums for an adequate replacement of a "real-time" anti-virus program/scanner for my still running great old computer with OS Win98SE since Avast! or AVG no longer provides support for this OS. Previously I was using Avast! Home Edition v4.8.1229.80923 which I have now removed.

A few questions if you will indulge me here please:

If I use Firefox v2.0.0.20 with pop-up blocker for internet surfing now, am I getting better protection from unwanted malware, spyware, and viruses than using Internet Explorer 6?

I see by reading through this forum that there has been several releases of the ClamWin/Sentinel program for Win98SE. Could anyone, very briefly, run through the successive steps I should I take to download this antivirus program combo? Links (if needed) would be greatly appreciated. I am prepared to pay for help provided and for this software so I can protect and keep this old computer running.

If anyone has any programs to recommend that works for Win98SE (I think a user mentioned Skype, which I haven't used) I would definitely appreciate your advice.


Thanks in advance for any help you are willing to provide regarding the above,


south pacific

Firefox 2 may be safer than Internet Explorer 6 simply because more people use IE, and more malware targets IE. Check out the World Browser at Brothersoft--https://www.brothersoft.com/theworld-browser-for-windows-98-111697.html on the web. The most recent update I saw was Sept. 2009.

Here is a link to help on starting/using Sentinel: https://clamsentinel.sourceforge.net/SentinelSimpleGuide.html on the web.

Here is the Sentinel download link: https://clamsentinel.sourceforge.net/ on the web. It is really a simple, easy to use program. Below are some instructions.

Normally you will download a zipped file containing the Sentinel setup. There may be another setup file available, such as the ClamSentinel.exe installation file by itself. You unzip the file to a directory (we recommend C:\Program Files\ClamSentinel) or put the ClamSentinel.exe file in that directory. You can set up the directory before downloading the file. After download and directory creation, you unzip the file to go to the C:\Program Files\ClamSentinel directory and run the ClamSentinel.exe file, which will perform the installation for you. If Sentinel was installed previously, your old configuration settings will be kept. Upon an initial installation, Sentinel asks the user what drives are to be monitored and if Sentinel should be started automatically (yes). You should monitor the permanent C drive, any other permanent hard drives, and any removable drives that you keep plugged in.

Regards,

Thank you so much for developing this NICE add-on for ClamWin.

I am very happy that do you like my little work.

Thank you,
aru

Hello Aru,

I like your program as it is the only one running on Windows 7 64 Bit (except the "Commerical" Immunet protect stuff). As for version 1.13, what are your plans for the future versions of this nice little proggy?

Thank you and regards

freefighter