ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
When the clamwin will have the real-time scanner????????????
gianpaolomapacpac@yahoo.c


Joined: 05 Dec 2010
Posts: 0
Location: Philippines
Reply with quote
When the clamwin antivirus will have the real-time scanner?????, you guys can do the real-time scanner engine using the visual sudio 2010 or the borland delphi..... ClamWin is a great antivirus as far as I know... Free and useful!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Hello:

The ClamWin project has been developing a real-time scanner (version 1.0) now for a couple of years. The problem is time and money. The two developers must make a living for themselves and their family, so they cannot really devote much time to the project. It is all they can do to port the Clam AV changes over to Windows with each new Clam version. They have had several volunteers to finish it; however, no one has stuck with it, but the code is about 50% done now. What is left is to add browser and USB protection and decide what to do about the real-time scanner. They are now thinking of integrating ClamSentinel for the real-time scan. Sentinel is not a kernel-mode scanner, but it has good heuristics, so using it can speed up the development.

The developers decided to partner with the Ask Toolbar people to get revenue to finish the project, and they now have revenue. It is not enough to pay a Western programmer, however, so they are trying to hire someone from India or Eastern Europe (Ukraine). They have talked to a couple of people, but nothing has come of it yet. I think they will probably have a ClamWin 1.0 sometime late next year.

In the meantime, the Clam Sentinel real-time add-in does a pretty good job at letting users scan with ClamWin in real-time. It does not repair viruses, but it is able to detect about 60% of new, unknown Windows PE file malware with its own heuristic scanner, and it has the ClamWin/Clam scanner and AV signatures. It also scans USB drives. It scans files when they are added to, copied, or modified on the computer.

Regards,

Bob
View user's profileSend private message
Scan Programs in Memory hourly
JoTraGo


Joined: 18 May 2011
Posts: 0
Location: Cape Town
Reply with quote
A compromise which I have found works well is using Clamwins facilty to scan programs in memory as often as possible, whihc is once every hour

I create an empty directory called clamwin
Set up a sheduled scan to run every hour tageted at the empty clamwin directoy
Check the "Scan Programs in Memory" option.

The result is a scan which runs very quickly (about 90 seconds on my machine), and is very unobrtrusive, I never notice it running while I am working.

It checks all programs loaded in memory, which hopefully should catch any nasties which have become resident.

I combine this with the freeware SpybotS&D which IS a real time scanner for malware but not viruses.

Hope this may be useful to people

JoTraGo
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
That is a pretty good way to go, Jo. Malwarebytes adds a scan of the autostart folder to a memory scan, and they call it a "flash" scan. I do that when working malware, but I also add my users\appdata\local\Bob folder, and system32\drivers. It does take several more minutes than the memory scan alone. I wish the ClamWin developers would add the ability to do some sort of quick scan. Scanning the entire computer for malware is, for the most part, wasted, as it will more than likely be found in just a few places.

Regards,
View user's profileSend private message
zaaylo


Joined: 06 Mar 2012
Posts: 0
Location: rajkot
Reply with quote
alch wrote:
From the brief analysis of the TechPro I can conclude that it use 2 approaches to "automate" scanning:

1) Monitors changes to files using ReadDirectoryChanges API calls. This is a notification only API and it is not possible to block writing of an infected file to disk. Therefore it is very easy to circumvent such protection by executing a file programatically before a user takes action. Possibilities include dismissing the virus warning dialog, etc.

2) Changes the way files are opened in Windows Explorer (Run action) and scans them first. Although it helps within Windows Explorer, a fil will run undetected when executed from command line or another program.

In ClamWin we consciously decided not to go this way and not implement the 2 features listed above for one major reason: if the protection is not comprehensive and can be bypassed with ease, then such protection creates a fals feel of security with a user and can do more harm then good.

ClamWin version has full-featured file system filtering and will block any read access to an infected file. ClamWin v1 is a major rewrite with no code from 0.xx codebase and cannot be introduced gradually (we would if we could).


Good analyze.
Are these two features really giving performances in realtime?
View user's profileSend private message
boilingcategory


Joined: 13 Mar 2012
Posts: 0
Location: united states
Reply with quote
What I am looking for is automatic scanning of any removable disk when it is mounted.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin is an on-demand scanner that only scans manually when you initiate it or as scheduled. I don't know your environment, but you might want to give Clam Sentinel a try. It allows you to use ClamWin as a real-time scanner and adds its own heuristic scan engine to detect malware for which there are no signatures. It is primarily for use on stand-alone computers (Win 98-Win 7) but does support multiple users (not necessarily networked) and multiple removable drives. It is free, open source software available at https://sourceforge.net/projects/clamsentinel/ on the web. I would not recommend using it in a networked environment or in a commercial business, for which you probably need heavily-tested, commercial security software.

Regards,
View user's profileSend private message
theEIIapproach


Joined: 28 Mar 2012
Posts: 0
Reply with quote
Just a follow-up question. Can you schedule the scanning even if the computer is not on or not really on-time for the scanning schedule?
View user's profileSend private message
jinjunkazuya


Joined: 10 Apr 2012
Posts: 0
Location: india
Reply with quote
hobo21 wrote:
for the past 6 or nine months ive been using both avg and clam win i know youve looked before but the code from avg may be helpfull
when clamwin fixes this problem and the version auomatically updates i wont be using avg anymore as a community based program like clamwin is the better option - only av program i know of with a forum like this so i know which one gets my support.



yeah...you are right...nice support Very Happy
View user's profileSend private messageSend e-mail
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Re: scheduled scans, the computer must be on for a scan to happen. A scan will complete as scheduled ifwhen the computer is on. If you want to scan at a non-scheduled time, you can do a manual scan via right-clicking on the directory or file while you are in Windows Explorer.

Re: dropping Avast, ClamWin is not a real-time scanner--it only scans on-demand, as scheduled or via a manual scan. If you surf the web, you need a real-time scanner like Avast for protection from drive-by downloads, exploits, and other malware. ClamWin makes a good backup scanner to a real-time scanner

The Clam Sentinel project at https://sourceforge.net/projects/clamsentinel/ on the web provides a free program that enables you to scan with ClamWin in real-time. Clam Sentinel uses ClamWin and its signatures when scanning, but it also has its own heuristic scan engine that can detect malware for which therre is no ClamWin signature. A new Clam Sentinel version (1.19) will be out in about a week, and it will have greatly-improved protection, but it does not yet offer protection that is as good as Avast. If you use ClamSentinel and ClamWin, I still recommend regular scans with Malwarebytes' free antimalware or Kaspersky's free TDSSKiller program (Norman's free Malware Cleaner or Dr. Web's free Cureit for older computers). First-time Clam Sentinel users should read the Simple Guide that comes in the ClamSentinel download package.

Regards,
View user's profileSend private message
traducere tehnica


Joined: 07 May 2012
Posts: 0
Reply with quote
Can i purchase the software online?? i'd really use an antivirus pretty soon
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin and Clam Sentinel are free to use. Other free AVs are Security Essentials, (Microsoft), Panda Free Cloud (Panda), AntiVir (Avira) and Avast. Without knowing anything about your surfing habits, I would recommend Security Essentials if you have a valid copy of Windows. Panda Free Cloud would also be good if you can't use Security Essentials. Consider ClamWin as a "backup" scanner after you get used to one of the above--it will give some extra protection.

Regards,
View user's profileSend private message
r3zen


Joined: 08 May 2012
Posts: 0
Reply with quote
I am using clam win atm .. but its good to know how to go about securing myself .. thanks for the advise!
View user's profileSend private message
Does ClamWin scan files in real time (when they're accessed)
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 5 of 5  

  
  
 Reply to topic